type=USER_END msg=audit(1765014769.130:57711): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014769.130:57712): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014769.172:57713): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014769.172:57714): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014769.173:57715): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=247606 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014769.233:57716): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014769.233:57717): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014769.248:57718): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014769.249:57719): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014769.250:57720): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=247622 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014769.281:57721): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014769.281:57722): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014769.307:57723): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014769.307:57724): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014769.308:57725): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=247639 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014769.376:57726): pid=247658 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014769.376:57727): pid=247658 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726862697A77706F726A79617A68626A6F646D7478716E616E6A6176666F7A75203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343736392E303738313633392D333133362D3235333537303732363137303534342F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014769.377:57728): pid=247658 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014769.380:57729): pid=247658 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014769.624:57730): pid=247658 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014769.624:57731): pid=247658 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014769.627:57732): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014769.628:57733): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014769.661:57734): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014769.662:57735): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014769.663:57736): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=247663 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014769.709:57737): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014769.709:57738): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014769.743:57739): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014769.743:57740): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014769.745:57741): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=247679 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014769.780:57742): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014769.781:57743): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014769.799:57744): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014769.799:57745): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014769.801:57746): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=247696 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014769.865:57747): pid=247715 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014769.865:57748): pid=247715 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F64787A6E78636B7775756572737A66646678626A7479646B73757371776969203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343736392E303738313633392D333133362D3235333537303732363137303534342F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014769.866:57749): pid=247715 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014769.869:57750): pid=247715 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014770.086:57751): pid=247715 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014770.086:57752): pid=247715 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014770.090:57753): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014770.090:57754): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014770.111:57755): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014770.112:57756): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014770.113:57757): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=247718 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014770.141:57758): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014770.142:57759): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014770.330:57760): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014770.330:57761): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014770.332:57762): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=247735 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014770.366:57763): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014770.366:57764): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014770.381:57765): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014770.381:57766): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014770.383:57767): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=247751 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014770.420:57768): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014770.421:57769): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014770.449:57770): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014770.449:57771): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014770.450:57772): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=247773 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014770.497:57773): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014770.497:57774): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014770.513:57775): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014770.513:57776): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014770.514:57777): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=247789 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014770.547:57778): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014770.547:57779): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014770.561:57780): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014770.561:57781): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014770.563:57782): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=247806 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014770.630:57783): pid=247825 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014770.631:57784): pid=247825 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6276776A67786962616F707A7676756B6975736E696F6C7272726D63736B7966203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343737302E333638373532322D333137332D39323733313939353935333738372F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014770.631:57785): pid=247825 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014770.634:57786): pid=247825 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014770.847:57787): pid=247825 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014770.847:57788): pid=247825 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014770.851:57789): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014770.851:57790): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014770.884:57791): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014770.884:57792): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014770.885:57793): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=247830 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014770.942:57794): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014770.942:57795): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014770.955:57796): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014770.955:57797): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014770.956:57798): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=247846 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014770.993:57799): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014770.993:57800): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014771.009:57801): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014771.009:57802): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014771.011:57803): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=247863 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014771.077:57804): pid=247882 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014771.077:57805): pid=247882 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67707077686E756A736B7474677071716561697A6A7972646C756368697A6676203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343737302E333638373532322D333137332D39323733313939353935333738372F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014771.078:57806): pid=247882 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014771.081:57807): pid=247882 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014771.294:57808): pid=247882 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014771.294:57809): pid=247882 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014771.297:57810): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014771.297:57811): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014771.320:57812): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014771.320:57813): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014771.321:57814): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=247885 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014771.344:57815): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014771.344:57816): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014771.516:57817): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014771.516:57818): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014771.518:57819): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=247902 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014771.549:57820): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014771.549:57821): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014771.565:57822): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014771.565:57823): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014771.566:57824): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=247918 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014771.614:57825): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014771.614:57826): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014771.662:57827): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014771.662:57828): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014771.663:57829): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=247940 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014771.709:57830): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014771.709:57831): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014771.724:57832): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014771.724:57833): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014771.725:57834): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=247956 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014771.759:57835): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014771.760:57836): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014771.780:57837): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014771.780:57838): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014771.782:57839): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=247973 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014771.847:57840): pid=247992 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014771.848:57841): pid=247992 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666A6A63626174746B68707470706D686C6A746D6D76636575746C766463676F203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343737312E353531373034322D333230392D37343134313138363434323232302F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014771.849:57842): pid=247992 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014771.852:57843): pid=247992 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014772.093:57844): pid=247992 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014772.094:57845): pid=247992 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014772.097:57846): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014772.097:57847): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014772.145:57848): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014772.145:57849): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014772.146:57850): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=247997 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014772.201:57851): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014772.202:57852): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014772.215:57853): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014772.216:57854): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014772.217:57855): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248013 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014772.250:57856): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014772.250:57857): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014772.261:57858): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014772.261:57859): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014772.263:57860): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248030 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014772.329:57861): pid=248049 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014772.329:57862): pid=248049 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D707478647362727A76727A737269676B7964637970787676686B666B6D6B7569203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343737312E353531373034322D333230392D37343134313138363434323232302F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014772.330:57863): pid=248049 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014772.333:57864): pid=248049 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014772.553:57865): pid=248049 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014772.553:57866): pid=248049 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014772.557:57867): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014772.557:57868): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014772.572:57869): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014772.572:57870): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014772.573:57871): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248052 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014772.605:57872): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014772.605:57873): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014772.767:57874): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014772.767:57875): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014772.768:57876): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248069 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014772.800:57877): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014772.800:57878): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014772.821:57879): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014772.821:57880): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014772.822:57881): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248085 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014772.861:57882): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014772.862:57883): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014772.891:57884): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014772.891:57885): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014772.893:57886): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248107 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014772.953:57887): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014772.953:57888): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014772.976:57889): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014772.976:57890): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014772.977:57891): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248123 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014773.009:57892): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014773.009:57893): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014773.801:57894): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014773.801:57895): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014773.803:57896): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248140 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014773.866:57897): pid=248159 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014773.867:57898): pid=248159 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78636A79707A616B62706B696779757866797A6D7267686A6A6E656E6C6F7066203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343737322E383037313534322D333234372D3139343833303238343035383532332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014773.868:57899): pid=248159 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014773.871:57900): pid=248159 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014774.095:57901): pid=248159 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014774.096:57902): pid=248159 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014774.100:57903): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014774.100:57904): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014774.124:57905): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014774.125:57906): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014774.126:57907): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248163 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014774.156:57908): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014774.156:57909): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014774.299:57910): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014774.299:57911): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014774.300:57912): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248180 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014774.332:57913): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014774.333:57914): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014774.354:57915): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014774.355:57916): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014774.356:57917): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248196 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014774.398:57918): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014774.399:57919): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014774.543:57920): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014774.543:57921): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014774.545:57922): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248218 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014774.597:57923): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014774.598:57924): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014774.610:57925): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014774.610:57926): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014774.612:57927): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248234 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014774.643:57928): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014774.644:57929): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014774.673:57930): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014774.673:57931): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014774.674:57932): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248251 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014774.738:57933): pid=248270 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014774.739:57934): pid=248270 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6361797478747A6762696464716D67687663726570707678706D777079777268203B202F7573722F62696E2F707974686F6E33202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343737342E333334373039342D333237322D3138313435333134313434313030392F416E736962616C6C5A5F6564706D5F6E667461626C65735F66726F6D5F66696C65732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014774.739:57935): pid=248270 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014774.742:57936): pid=248270 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014774.974:57937): pid=248270 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014774.974:57938): pid=248270 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014774.978:57939): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014774.978:57940): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014774.995:57941): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014774.996:57942): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014774.997:57943): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248273 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014775.024:57944): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014775.024:57945): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014775.313:57946): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014775.313:57947): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014775.314:57948): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248290 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014775.348:57949): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014775.349:57950): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014775.368:57951): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014775.368:57952): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014775.369:57953): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248306 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014775.407:57954): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014775.407:57955): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014776.507:57956): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014776.507:57957): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014776.509:57958): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248328 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014776.570:57959): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014776.571:57960): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014776.587:57961): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014776.587:57962): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014776.588:57963): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248344 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014776.621:57964): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014776.621:57965): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014776.644:57966): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014776.645:57967): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014776.646:57968): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248361 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014776.714:57969): pid=248380 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014776.714:57970): pid=248380 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666C6F6A71716661637A636C636A626271667778777A64686D6B67686B6A796C203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343737352E3335313037322D333239382D343531313432333633313736362F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014776.715:57971): pid=248380 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014776.717:57972): pid=248380 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014776.956:57973): pid=248380 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014776.956:57974): pid=248380 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014776.959:57975): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014776.959:57976): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014776.985:57977): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014776.986:57978): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014776.987:57979): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248385 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014777.032:57980): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014777.033:57981): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014777.044:57982): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014777.045:57983): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014777.046:57984): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248401 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014777.082:57985): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014777.082:57986): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014777.106:57987): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014777.107:57988): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014777.108:57989): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248418 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014777.176:57990): pid=248437 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014777.176:57991): pid=248437 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F71686A6F6F6A707266636B79656266646C6875787467746A6F747762656676203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343737352E3335313037322D333239382D343531313432333633313736362F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014777.178:57992): pid=248437 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014777.181:57993): pid=248437 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014777.393:57994): pid=248437 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014777.393:57995): pid=248437 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014777.397:57996): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014777.397:57997): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014777.411:57998): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014777.411:57999): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014777.412:58000): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248440 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014777.442:58001): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014777.442:58002): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1765014777.480:58003): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014777.584:58004): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765014777.691:58005): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014777.691:58006): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014777.692:58007): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248475 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014777.725:58008): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014777.725:58009): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014777.746:58010): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014777.746:58011): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014777.748:58012): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248491 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014777.784:58013): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014777.784:58014): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014777.884:58015): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014777.884:58016): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014777.885:58017): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248513 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014777.932:58018): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014777.932:58019): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014777.949:58020): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014777.949:58021): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014777.951:58022): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248529 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014777.985:58023): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014777.985:58024): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014778.007:58025): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014778.007:58026): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014778.008:58027): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248546 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014778.077:58028): pid=248565 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014778.078:58029): pid=248565 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616A6C6371796C6D70677461747564686F77776B736B7675726F706662767872203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343737372E3732373136322D333333322D3231363833323634363737383632372F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014778.078:58030): pid=248565 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014778.082:58031): pid=248565 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014778.316:58032): pid=248565 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014778.316:58033): pid=248565 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014778.320:58034): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014778.320:58035): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014778.364:58036): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014778.364:58037): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014778.365:58038): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248570 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014778.435:58039): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014778.435:58040): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014778.460:58041): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014778.460:58042): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014778.462:58043): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248586 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014778.496:58044): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014778.496:58045): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014778.513:58046): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014778.513:58047): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014778.515:58048): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248603 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014778.581:58049): pid=248622 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014778.581:58050): pid=248622 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6371646D6769636B767062636968626B7465646972646A7171617468726C7675203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343737372E3732373136322D333333322D3231363833323634363737383632372F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014778.582:58051): pid=248622 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014778.584:58052): pid=248622 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014778.813:58053): pid=248622 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014778.814:58054): pid=248622 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014778.817:58055): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014778.818:58056): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014778.837:58057): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014778.837:58058): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014778.838:58059): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248625 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014778.869:58060): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014778.870:58061): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014779.028:58062): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014779.028:58063): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014779.030:58064): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248642 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014779.061:58065): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014779.061:58066): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014779.081:58067): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014779.081:58068): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014779.082:58069): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248658 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014779.121:58070): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014779.121:58071): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014779.200:58072): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014779.201:58073): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014779.202:58074): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248680 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014779.272:58075): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014779.272:58076): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014779.315:58077): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014779.315:58078): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014779.316:58079): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248696 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014779.350:58080): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014779.350:58081): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014779.367:58082): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014779.367:58083): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014779.368:58084): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248713 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014779.437:58085): pid=248732 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014779.437:58086): pid=248732 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A746561776F76636C6C70687967786C7A62736D647364716B6F75746D6C7365203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343737392E30363338382D333336382D3236353137353630323032333032302F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014779.437:58087): pid=248732 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014779.440:58088): pid=248732 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014779.660:58089): pid=248732 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014779.661:58090): pid=248732 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014779.664:58091): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014779.664:58092): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014779.705:58093): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014779.705:58094): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014779.707:58095): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248737 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014779.772:58096): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014779.773:58097): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014779.800:58098): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014779.800:58099): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014779.802:58100): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248753 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014779.836:58101): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014779.836:58102): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014779.859:58103): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014779.859:58104): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014779.861:58105): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248770 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014779.933:58106): pid=248789 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014779.933:58107): pid=248789 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736676797070766F74656762717377716D747263746D6B79706E626D6F636675203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343737392E30363338382D333336382D3236353137353630323032333032302F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014779.934:58108): pid=248789 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014779.936:58109): pid=248789 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014780.154:58110): pid=248789 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014780.154:58111): pid=248789 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014780.158:58112): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014780.158:58113): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014780.182:58114): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014780.182:58115): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014780.184:58116): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248792 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014780.217:58117): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014780.217:58118): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014780.339:58119): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014780.339:58120): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014780.341:58121): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248809 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014780.372:58122): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014780.372:58123): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014780.391:58124): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014780.391:58125): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014780.392:58126): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248825 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014780.429:58127): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014780.429:58128): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014780.488:58129): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014780.488:58130): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014780.489:58131): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248847 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014780.542:58132): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014780.542:58133): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014780.561:58134): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014780.561:58135): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014780.562:58136): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248863 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014780.594:58137): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014780.594:58138): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014780.612:58139): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014780.612:58140): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014780.613:58141): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248880 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014780.673:58142): pid=248899 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014780.674:58143): pid=248899 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66757977736668726D6C6B6E647874746A766F67746779616868717564717272203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343738302E333733393334352D333430332D3135323937343436393633363537352F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014780.674:58144): pid=248899 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014780.676:58145): pid=248899 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014780.896:58146): pid=248899 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014780.897:58147): pid=248899 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014780.900:58148): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014780.901:58149): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014780.919:58150): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014780.919:58151): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014780.921:58152): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248904 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014780.982:58153): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014780.983:58154): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014780.999:58155): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014781.000:58156): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014781.001:58157): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248920 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014781.033:58158): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014781.034:58159): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014781.050:58160): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014781.050:58161): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014781.051:58162): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248937 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014781.121:58163): pid=248956 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014781.121:58164): pid=248956 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6361687264687075706E7A7A666A716C6D636B77677565657470776C636E656E203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343738302E333733393334352D333430332D3135323937343436393633363537352F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014781.122:58165): pid=248956 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014781.124:58166): pid=248956 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014781.343:58167): pid=248956 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014781.343:58168): pid=248956 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014781.346:58169): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014781.346:58170): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014781.369:58171): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014781.369:58172): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014781.370:58173): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248959 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014781.398:58174): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014781.399:58175): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014781.722:58176): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014781.722:58177): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014781.724:58178): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248976 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014781.754:58179): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014781.754:58180): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014781.772:58181): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014781.772:58182): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014781.774:58183): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=248992 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014781.810:58184): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014781.810:58185): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014781.919:58186): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014781.919:58187): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014781.920:58188): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249014 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014781.982:58189): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014781.982:58190): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014781.994:58191): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014781.994:58192): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014781.995:58193): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249030 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014782.029:58194): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014782.029:58195): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014782.050:58196): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014782.050:58197): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014782.051:58198): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249047 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014782.107:58199): pid=249066 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014782.108:58200): pid=249066 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6474666A6D686D6B767675736E6C7665646B62776F686C726574716F64616A203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343738312E373536333837352D333434302D3235373533373339363939373030312F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014782.108:58201): pid=249066 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014782.120:58202): pid=249066 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1765014782.121:58203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014782.123:58204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014782.243:58205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014782.348:58206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014782.366:58207): pid=249066 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014782.366:58208): pid=249066 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014782.371:58209): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014782.371:58210): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014782.424:58211): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014782.424:58212): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014782.426:58213): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249112 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014782.474:58214): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014782.474:58215): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014782.492:58216): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014782.492:58217): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014782.493:58218): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249128 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014782.528:58219): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014782.528:58220): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014782.569:58221): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014782.569:58222): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014782.571:58223): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249145 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014782.640:58224): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014782.640:58225): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014782.655:58226): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014782.656:58227): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014782.657:58228): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249161 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014782.692:58229): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014782.692:58230): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014782.708:58231): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014782.708:58232): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014782.710:58233): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249178 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014782.784:58234): pid=249197 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014782.784:58235): pid=249197 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65786162646B6D716F626C75716E626167726A7870766565716D7473636D717A203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343738312E373536333837352D333434302D3235373533373339363939373030312F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014782.785:58236): pid=249197 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014782.788:58237): pid=249197 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014783.063:58238): pid=249197 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014783.063:58239): pid=249197 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014783.068:58240): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014783.068:58241): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014783.092:58242): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014783.092:58243): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014783.094:58244): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249200 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014783.129:58245): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014783.130:58246): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014783.281:58247): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014783.282:58248): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014783.283:58249): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249217 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014783.315:58250): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014783.315:58251): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014783.335:58252): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014783.336:58253): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014783.337:58254): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249233 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014783.376:58255): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014783.376:58256): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014783.426:58257): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014783.426:58258): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014783.427:58259): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249255 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014783.477:58260): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014783.478:58261): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014783.501:58262): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014783.501:58263): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014783.502:58264): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249271 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014783.535:58265): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014783.535:58266): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014783.558:58267): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014783.558:58268): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014783.560:58269): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249288 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014783.629:58270): pid=249307 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014783.629:58271): pid=249307 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D617A6A76776F657871786B7773676D6C6862767661796F6B676262736472656C203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343738332E333137383434322D333438342D3133343935343732303938363439302F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014783.630:58272): pid=249307 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014783.633:58273): pid=249307 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014783.845:58274): pid=249307 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014783.845:58275): pid=249307 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014783.848:58276): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014783.848:58277): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014783.873:58278): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014783.873:58279): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014783.875:58280): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249310 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014783.903:58281): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014783.903:58282): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014784.046:58283): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014784.047:58284): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014784.048:58285): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249327 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014784.079:58286): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014784.080:58287): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014784.093:58288): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014784.093:58289): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014784.094:58290): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249343 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014784.130:58291): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014784.131:58292): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014784.157:58293): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014784.157:58294): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014784.159:58295): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249365 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014784.218:58296): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014784.218:58297): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014784.237:58298): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014784.237:58299): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014784.238:58300): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249381 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014784.271:58301): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014784.271:58302): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014784.288:58303): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014784.288:58304): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014784.290:58305): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249398 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014784.357:58306): pid=249417 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014784.357:58307): pid=249417 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796E6369716F6E7765676A72616563756B716F6F64746A77767A68767A77706F203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343738342E3038323139342D333530392D3234303239373739383137373631362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014784.358:58308): pid=249417 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014784.361:58309): pid=249417 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014784.603:58310): pid=249417 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014784.604:58311): pid=249417 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014784.608:58312): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014784.608:58313): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014784.633:58314): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014784.633:58315): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014784.634:58316): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249423 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014784.660:58317): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014784.661:58318): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014784.776:58319): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014784.776:58320): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014784.778:58321): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249440 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014784.806:58322): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014784.806:58323): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014784.833:58324): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014784.833:58325): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014784.835:58326): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249456 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014784.869:58327): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014784.869:58328): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014784.976:58329): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014784.977:58330): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014784.978:58331): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249479 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014785.029:58332): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014785.029:58333): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014785.048:58334): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014785.048:58335): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014785.049:58336): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249514 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014785.084:58337): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014785.084:58338): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014785.109:58339): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014785.109:58340): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014785.110:58341): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249531 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014785.174:58342): pid=249550 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014785.174:58343): pid=249550 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78726374666979746B7861716867736865666D62617A7A6C716D7A6277647A75203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343738342E383038303336332D333533322D39383335353338373136373130352F416E736962616C6C5A5F626C6F636B696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014785.177:58344): pid=249550 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1765014785.198:58345): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765014785.201:58346): pid=249550 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_STOP msg=audit(1765014785.317:58347): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014785.448:58348): pid=249550 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014785.448:58349): pid=249550 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014785.453:58350): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014785.453:58351): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014785.485:58352): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014785.485:58353): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014785.486:58354): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249575 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014785.514:58355): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014785.514:58356): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014785.758:58357): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014785.758:58358): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014785.760:58359): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249594 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014785.792:58360): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014785.792:58361): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014785.808:58362): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014785.808:58363): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014785.810:58364): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249628 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014785.847:58365): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014785.847:58366): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014785.873:58367): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014785.873:58368): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014785.875:58369): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249650 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014785.924:58370): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014785.924:58371): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014785.936:58372): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014785.937:58373): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014785.938:58374): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249666 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014785.969:58375): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014785.970:58376): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014785.981:58377): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014785.981:58378): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014785.982:58379): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249683 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014786.047:58380): pid=249702 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014786.047:58381): pid=249702 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79716F6C76647065627A62736279756D6B61636371656565777A6B6379676F6C203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343738352E373933393034332D333535392D3237383738353933303731303332392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014786.048:58382): pid=249702 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014786.052:58383): pid=249702 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=NETFILTER_CFG msg=audit(1765014786.227:58384): table=raw:13 family=1 entries=2 op=nft_register_chain pid=249707 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=NETFILTER_CFG msg=audit(1765014786.227:58384): table=filter:13 family=1 entries=1 op=nft_register_chain pid=249707 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=SYSCALL msg=audit(1765014786.227:58384): arch=c000003e syscall=46 success=yes exit=180 a0=3 a1=7fff64feb910 a2=0 a3=7fd89bc8cbc4 items=0 ppid=249706 pid=249707 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=56 comm="nft" exe="/usr/sbin/nft" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765014786.227:58384): proctitle=6E6674002D66002F6574632F6E667461626C65732F6564706D2D636861696E732E6E6674
type=USER_END msg=audit(1765014786.244:58385): pid=249702 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014786.245:58386): pid=249702 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014786.248:58387): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014786.248:58388): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014786.270:58389): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014786.270:58390): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014786.271:58391): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249708 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014786.304:58392): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014786.304:58393): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014786.534:58394): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014786.535:58395): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014786.536:58396): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249725 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014786.569:58397): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014786.569:58398): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014786.585:58399): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014786.585:58400): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014786.586:58401): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249741 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014786.623:58402): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014786.623:58403): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014786.673:58404): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014786.673:58405): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014786.675:58406): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249763 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014786.719:58407): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014786.719:58408): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014786.731:58409): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014786.731:58410): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014786.732:58411): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249779 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014786.765:58412): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014786.765:58413): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014786.780:58414): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014786.780:58415): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014786.781:58416): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249796 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014786.850:58417): pid=249815 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014786.850:58418): pid=249815 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66756569676F716A696776656964747A7077776878647365726A696175687465203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343738362E353731343636342D333538342D323533333437323332353735362F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014786.851:58419): pid=249815 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014786.854:58420): pid=249815 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014787.078:58421): pid=249815 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014787.079:58422): pid=249815 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014787.082:58423): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014787.082:58424): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014787.700:58425): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014787.700:58426): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014787.701:58427): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249820 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014787.740:58428): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014787.740:58429): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014787.880:58430): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014787.880:58431): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014787.882:58432): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249837 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014787.913:58433): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014787.914:58434): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014787.926:58435): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014787.926:58436): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014787.928:58437): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249853 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014787.965:58438): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014787.965:58439): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014787.987:58440): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014787.987:58441): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014787.988:58442): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249875 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014788.039:58443): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014788.039:58444): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014788.053:58445): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014788.053:58446): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014788.054:58447): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249891 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014788.087:58448): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014788.087:58449): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014788.100:58450): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014788.100:58451): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014788.102:58452): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249908 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014788.167:58453): pid=249927 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014788.167:58454): pid=249927 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6A6663676C6C6D757473706C6D626172666B63786D6161706F70706D6B6161203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343738372E3931353534332D333630382D3235393436353632333437393137322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014788.167:58455): pid=249927 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014788.170:58456): pid=249927 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=NETFILTER_CFG msg=audit(1765014788.380:58457): table=raw:14 family=1 entries=6 op=nft_register_rule pid=249932 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=NETFILTER_CFG msg=audit(1765014788.380:58457): table=filter:14 family=1 entries=26 op=nft_register_chain pid=249932 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=SYSCALL msg=audit(1765014788.380:58457): arch=c000003e syscall=46 success=yes exit=7688 a0=3 a1=7ffeead6d960 a2=0 a3=7ff83cb6fbc4 items=0 ppid=249930 pid=249932 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=56 comm="nft" exe="/usr/sbin/nft" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765014788.380:58457): proctitle=6E6674002D66002D
type=USER_END msg=audit(1765014788.397:58458): pid=249927 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014788.397:58459): pid=249927 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014788.401:58460): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014788.401:58461): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014788.417:58462): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014788.417:58463): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014788.418:58464): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249933 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014788.448:58465): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014788.448:58466): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014788.608:58467): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014788.608:58468): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014788.609:58469): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249950 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014788.639:58470): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014788.639:58471): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014788.652:58472): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014788.652:58473): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014788.653:58474): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249966 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014788.688:58475): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014788.688:58476): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014788.720:58477): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014788.720:58478): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014788.721:58479): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=249988 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014788.770:58480): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014788.770:58481): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014788.786:58482): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014788.786:58483): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014788.787:58484): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250004 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014788.820:58485): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014788.820:58486): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014788.836:58487): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014788.836:58488): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014788.837:58489): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250021 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014788.902:58490): pid=250040 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014788.902:58491): pid=250040 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666E6F7570756B6C7962716A6B6E6D7063676372726F71766E646D7676677169203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343738382E3634313631332D333633322D33363437303230313633303132322F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014788.902:58492): pid=250040 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014788.904:58493): pid=250040 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014789.115:58494): pid=250040 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014789.115:58495): pid=250040 uid=1000 auid=1000 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014789.118:58496): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014789.118:58497): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014789.141:58498): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014789.141:58499): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014789.142:58500): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250043 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014789.166:58501): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014789.166:58502): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014790.099:58503): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=243128 suid=1000 rport=57112 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014790.099:58504): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=243128 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014790.103:58505): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1765014790.103:58506): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014790.104:58507): pid=243118 uid=0 auid=1000 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=243118 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=SERVICE_START msg=audit(1765014790.124:58508): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014790.247:58509): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014791.470:58510): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014791.578:58511): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014796.602:58512): pid=250103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250103 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765014796.604:58513): pid=250102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=250103 suid=74 rport=33120 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765014796.604:58514): pid=250102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=250103 suid=74 rport=33120 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765014796.701:58515): pid=250102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014796.701:58516): pid=250102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:e0:39:03:0c:58:11:ed:73:22:37:9b:fb:b5:96:ae:e6:c9:d5:b4:79:86:de:e9:6d:a3:5f:2e:d5:1c:00:d2:eb exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765014796.723:58517): pid=250102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014796.724:58518): pid=250102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=250103 suid=74 rport=33120 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765014796.726:58519): pid=250102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765014796.726:58520): pid=250102 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=57 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1765014796.726:58520): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd0af6c790 a2=4 a3=3e8 items=0 ppid=182854 pid=250102 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=57 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765014796.726:58520): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765014796.727:58521): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1765014796.757:58522): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014796.758:58523): pid=250105 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250105 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=CRED_ACQ msg=audit(1765014796.759:58524): pid=250105 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1765014796.802:58525): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014796.802:58526): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014796.804:58527): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250106 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014796.840:58528): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014796.840:58529): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014796.857:58530): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014796.857:58531): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014796.858:58532): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250122 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014796.897:58533): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014796.897:58534): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014797.110:58535): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014797.110:58536): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014797.111:58537): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250144 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014797.140:58538): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014797.140:58539): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014797.167:58540): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014797.167:58541): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014797.168:58542): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250161 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014797.215:58543): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014797.215:58544): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014797.227:58545): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014797.227:58546): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014797.229:58547): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250177 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014797.261:58548): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014797.261:58549): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014797.277:58550): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014797.277:58551): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014797.279:58552): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250194 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014797.349:58553): pid=250213 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014797.350:58554): pid=250213 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6262636F66687667727463756A6E7A71716D73706B62636D636C746C6B74646C203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343739362E38343331362D32382D31313236313136393439383032302F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014797.351:58555): pid=250213 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014797.355:58556): pid=250213 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014797.586:58557): pid=250213 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014797.587:58558): pid=250213 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014797.590:58559): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014797.591:58560): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1765014797.605:58561): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765014797.627:58562): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014797.627:58563): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014797.629:58564): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250227 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014797.659:58565): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014797.660:58566): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014797.703:58567): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014797.703:58568): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014797.704:58569): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250257 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014797.735:58570): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014797.735:58571): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014797.746:58572): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014797.746:58573): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014797.747:58574): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250276 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=SERVICE_STOP msg=audit(1765014797.763:58575): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014797.785:58576): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014797.785:58577): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014797.816:58578): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014797.816:58579): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014797.817:58580): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250298 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014797.868:58581): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014797.868:58582): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014797.889:58583): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014797.889:58584): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014797.890:58585): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250314 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014797.923:58586): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014797.923:58587): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014797.945:58588): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014797.945:58589): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014797.947:58590): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250331 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014798.014:58591): pid=250350 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014798.014:58592): pid=250350 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616A776561636777646D76767861706B757566637A69696164786F6662686774203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343739372E373337393139332D32382D3231373539353235383937333035322F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014798.015:58593): pid=250350 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014798.018:58594): pid=250350 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014798.248:58595): pid=250350 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014798.248:58596): pid=250350 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014798.252:58597): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014798.252:58598): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014798.268:58599): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014798.268:58600): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014798.269:58601): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250353 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014798.303:58602): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014798.303:58603): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014798.348:58604): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014798.348:58605): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014798.350:58606): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250370 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014798.382:58607): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014798.383:58608): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014798.399:58609): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014798.399:58610): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014798.400:58611): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250386 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014798.441:58612): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014798.441:58613): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014798.465:58614): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014798.465:58615): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014798.466:58616): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250412 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014798.517:58617): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014798.517:58618): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014798.532:58619): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014798.532:58620): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014798.533:58621): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250428 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014798.566:58622): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014798.566:58623): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014798.582:58624): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014798.582:58625): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014798.584:58626): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250445 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014798.653:58627): pid=250464 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014798.654:58628): pid=250464 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61767A79656A676E6B6271667361646266797766686E686B7969736173796D77203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343739382E333836393739382D32382D3131313032373931373731303239352F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014798.654:58629): pid=250464 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014798.658:58630): pid=250464 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014798.877:58631): pid=250464 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014798.878:58632): pid=250464 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014798.881:58633): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014798.882:58634): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014798.902:58635): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014798.903:58636): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014798.904:58637): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250467 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014798.931:58638): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014798.931:58639): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014799.120:58640): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014799.120:58641): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014799.121:58642): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250484 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014799.152:58643): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014799.152:58644): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014799.165:58645): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014799.165:58646): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014799.167:58647): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250500 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014799.202:58648): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014799.202:58649): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014799.395:58650): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014799.395:58651): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014799.396:58652): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250522 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014799.464:58653): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014799.465:58654): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014799.492:58655): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014799.492:58656): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014799.493:58657): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250538 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014799.528:58658): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014799.529:58659): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014799.549:58660): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014799.549:58661): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014799.551:58662): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250555 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014799.811:58663): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014799.812:58664): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014799.861:58665): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014799.861:58666): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014799.863:58667): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250575 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014799.901:58668): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014799.901:58669): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014799.923:58670): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014799.923:58671): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014799.925:58672): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250591 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014799.958:58673): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014799.958:58674): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014800.043:58675): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014800.043:58676): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014800.044:58677): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250608 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014800.117:58678): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014800.117:58679): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014800.135:58680): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014800.135:58681): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014800.137:58682): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250624 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014800.168:58683): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014800.168:58684): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014800.184:58685): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014800.184:58686): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014800.186:58687): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250641 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014800.441:58688): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014800.441:58689): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014800.465:58690): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014800.465:58691): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014800.466:58692): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250661 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014800.496:58693): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014800.497:58694): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014800.608:58695): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014800.608:58696): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014800.609:58697): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250678 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014800.639:58698): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014800.639:58699): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014800.660:58700): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014800.660:58701): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014800.661:58702): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250694 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014800.697:58703): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014800.698:58704): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014800.757:58705): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014800.757:58706): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014800.759:58707): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250716 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014800.808:58708): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014800.808:58709): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014800.823:58710): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014800.823:58711): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014800.825:58712): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250732 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014800.857:58713): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014800.858:58714): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014800.870:58715): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014800.870:58716): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014800.871:58717): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250749 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014801.120:58718): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014801.121:58719): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014801.148:58720): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014801.148:58721): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014801.150:58722): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250769 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014801.188:58723): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014801.189:58724): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014801.199:58725): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014801.199:58726): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014801.200:58727): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250785 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014801.232:58728): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014801.232:58729): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014801.266:58730): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014801.266:58731): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014801.267:58732): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250802 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014801.310:58733): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014801.310:58734): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014801.331:58735): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014801.331:58736): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014801.333:58737): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250818 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014801.362:58738): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014801.363:58739): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014801.382:58740): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014801.383:58741): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014801.384:58742): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250835 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014801.634:58743): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014801.634:58744): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014801.666:58745): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014801.666:58746): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014801.668:58747): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250855 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014801.700:58748): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014801.700:58749): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014801.753:58750): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014801.753:58751): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014801.754:58752): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250872 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014801.788:58753): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014801.788:58754): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014801.806:58755): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014801.806:58756): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014801.807:58757): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250888 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014801.843:58758): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014801.843:58759): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014801.875:58760): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014801.875:58761): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014801.876:58762): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250910 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014801.925:58763): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014801.925:58764): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014801.943:58765): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014801.943:58766): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014801.944:58767): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250926 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014802.013:58768): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014802.014:58769): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014802.028:58770): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014802.028:58771): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014802.030:58772): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250943 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014802.269:58773): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014802.269:58774): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014802.922:58775): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014802.922:58776): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014802.923:58777): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250963 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014802.965:58778): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014802.966:58779): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014802.987:58780): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014802.987:58781): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014802.989:58782): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250979 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014803.022:58783): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014803.022:58784): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014803.054:58785): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014803.055:58786): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014803.056:58787): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250996 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014803.114:58788): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014803.114:58789): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014803.134:58790): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014803.134:58791): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014803.136:58792): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251012 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014803.165:58793): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014803.165:58794): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014803.184:58795): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014803.184:58796): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014803.185:58797): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251029 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014803.431:58798): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014803.431:58799): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014803.452:58800): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014803.452:58801): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014803.453:58802): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251049 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014803.480:58803): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014803.480:58804): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014803.515:58805): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014803.516:58806): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014803.517:58807): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251066 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014803.550:58808): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014803.550:58809): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014803.571:58810): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014803.571:58811): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014803.573:58812): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251082 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014803.617:58813): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014803.617:58814): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014803.664:58815): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014803.664:58816): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014803.666:58817): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251109 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014803.729:58818): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014803.729:58819): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014803.752:58820): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014803.752:58821): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014803.753:58822): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251125 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014803.788:58823): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014803.788:58824): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014803.810:58825): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014803.810:58826): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014803.812:58827): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251142 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014804.094:58828): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014804.094:58829): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014804.120:58830): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014804.120:58831): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014804.122:58832): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251162 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014804.161:58833): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014804.161:58834): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014804.174:58835): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014804.175:58836): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014804.176:58837): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251178 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014804.208:58838): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014804.209:58839): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014804.239:58840): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014804.239:58841): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014804.241:58842): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251195 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014804.299:58843): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014804.300:58844): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014804.316:58845): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014804.316:58846): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014804.318:58847): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251211 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014804.352:58848): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014804.352:58849): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014804.371:58850): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014804.371:58851): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014804.373:58852): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251228 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014804.621:58853): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014804.622:58854): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014804.644:58855): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014804.645:58856): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014804.647:58857): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251248 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014804.681:58858): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014804.681:58859): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014806.073:58860): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014806.074:58861): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014806.076:58862): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251265 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014806.107:58863): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014806.108:58864): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014806.122:58865): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014806.122:58866): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014806.123:58867): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251281 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014806.163:58868): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014806.164:58869): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014806.205:58870): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014806.205:58871): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014806.207:58872): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251303 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014806.248:58873): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014806.249:58874): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014806.275:58875): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014806.275:58876): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014806.277:58877): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251319 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014806.313:58878): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014806.313:58879): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014806.327:58880): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014806.327:58881): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014806.329:58882): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251336 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014806.583:58883): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014806.583:58884): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014806.617:58885): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014806.617:58886): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014806.619:58887): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251356 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014806.661:58888): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014806.661:58889): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014806.678:58890): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014806.679:58891): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014806.680:58892): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251372 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014806.717:58893): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014806.717:58894): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014806.744:58895): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014806.744:58896): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014806.745:58897): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251389 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014806.808:58898): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014806.809:58899): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014806.824:58900): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014806.824:58901): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014806.826:58902): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251405 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014806.863:58903): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014806.863:58904): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014806.884:58905): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014806.884:58906): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014806.886:58907): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251422 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014807.144:58908): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014807.144:58909): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014807.159:58910): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014807.159:58911): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014807.161:58912): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251442 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014807.193:58913): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014807.194:58914): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014807.417:58915): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014807.417:58916): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014807.419:58917): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251459 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014807.452:58918): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014807.453:58919): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014807.470:58920): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014807.470:58921): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014807.472:58922): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251475 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014807.509:58923): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014807.509:58924): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014807.546:58925): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014807.546:58926): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014807.548:58927): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251497 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_LOGIN msg=audit(1765014807.550:58928): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014807.550:58929): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014807.613:58930): pid=251499 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014807.613:58931): pid=251499 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014807.614:58932): pid=251499 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014807.620:58933): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014807.620:58934): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014807.632:58935): pid=251499 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014807.634:58936): pid=251499 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014807.634:58937): pid=251499 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765014807.635:58938): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014807.640:58939): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014807.640:58940): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014807.646:58941): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014807.646:58942): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014807.649:58943): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251537 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_LOGIN msg=audit(1765014807.654:58944): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014807.654:58945): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765014807.692:58946): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014807.692:58947): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014807.709:58948): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014807.709:58949): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014807.712:58950): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251575 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014807.717:58951): pid=251540 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014807.717:58952): pid=251540 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F75742038393520636865636B2D686F7374 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014807.718:58953): pid=251540 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014807.721:58954): pid=251540 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_STOP msg=audit(1765014807.788:58955): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014808.020:58956): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014808.020:58957): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014808.041:58958): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014808.041:58959): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014808.043:58960): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251615 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014808.068:58961): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014808.068:58962): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765014808.165:58963): pid=251540 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014808.165:58964): pid=251540 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014808.174:58965): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014808.174:58966): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014808.236:58967): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014808.236:58968): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014808.280:58969): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014808.280:58970): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014808.282:58971): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251662 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014808.303:58972): pid=251645 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014808.304:58973): pid=251645 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014808.305:58974): pid=251645 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014808.310:58975): pid=251645 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014808.312:58976): pid=251645 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014808.313:58977): pid=251645 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014808.316:58978): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014808.316:58979): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014808.336:58980): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014808.336:58981): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014808.338:58982): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251679 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014808.355:58983): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014808.355:58984): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765014808.379:58985): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014808.379:58986): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014808.408:58987): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014808.408:58988): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014808.409:58989): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251701 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_LOGIN msg=audit(1765014808.414:58990): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014808.414:58991): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765014808.469:58992): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014808.470:58993): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765014808.482:58994): pid=251705 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014808.482:58995): pid=251705 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014808.482:58996): pid=251705 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_LOGIN msg=audit(1765014808.484:58997): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014808.484:58998): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014808.486:58999): pid=251705 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765014808.486:59000): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251734 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014808.522:59001): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014808.522:59002): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014808.543:59003): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014808.543:59004): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014808.545:59005): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251752 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014808.614:59006): pid=251771 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014808.614:59007): pid=251771 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63786464707774796B6E7473786A7A7A79666D71736B6D6371736E76736C6965203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343830382E333138393239342D3339372D3134343037383931393633303535362F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014808.615:59008): pid=251771 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014808.618:59009): pid=251771 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014808.872:59010): pid=251771 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014808.873:59011): pid=251771 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014808.876:59012): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014808.876:59013): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014808.900:59014): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014808.900:59015): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014808.901:59016): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251789 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014808.929:59017): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014808.929:59018): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014809.109:59019): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014809.109:59020): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014809.110:59021): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251817 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014809.146:59022): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014809.147:59023): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014809.165:59024): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014809.165:59025): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014809.167:59026): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251839 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014809.185:59027): pid=251705 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014809.186:59028): pid=251705 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014809.206:59029): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014809.207:59030): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765014809.237:59031): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014809.237:59032): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014809.252:59033): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014809.252:59034): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014809.254:59035): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251861 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014809.333:59036): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014809.333:59037): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014809.362:59038): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014809.362:59039): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014809.362:59040): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251877 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014809.395:59041): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014809.395:59042): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014809.415:59043): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014809.415:59044): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014809.417:59045): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251894 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014809.487:59046): pid=251913 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014809.487:59047): pid=251913 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736F6270777974716566637A7868797562616E6D647772627868696165766274203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343830392E313438393930322D3432312D39313330343532373638353431392F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014809.488:59048): pid=251913 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014809.491:59049): pid=251913 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014809.704:59050): pid=251913 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014809.704:59051): pid=251913 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014809.708:59052): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014809.708:59053): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014809.753:59054): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014809.754:59055): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014809.755:59056): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251918 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014809.814:59057): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014809.815:59058): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014809.841:59059): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014809.841:59060): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014809.843:59061): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251934 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014809.878:59062): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014809.878:59063): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014809.889:59064): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014809.889:59065): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014809.890:59066): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251951 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014809.961:59067): pid=251970 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014809.961:59068): pid=251970 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6667756C787768646261727A7965726972676E6763726F6273746A7270727167203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343830392E313438393930322D3432312D39313330343532373638353431392F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014809.962:59069): pid=251970 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014809.965:59070): pid=251970 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014810.188:59071): pid=251970 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014810.188:59072): pid=251970 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014810.192:59073): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014810.193:59074): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014810.203:59075): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014810.203:59076): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014810.204:59077): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251973 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014810.237:59078): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014810.237:59079): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014810.262:59080): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014810.262:59081): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014810.263:59082): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=251990 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014810.297:59083): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014810.297:59084): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014810.309:59085): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014810.309:59086): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014810.310:59087): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252006 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014810.351:59088): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014810.351:59089): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014810.375:59090): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014810.375:59091): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014810.376:59092): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252028 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014810.448:59093): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014810.448:59094): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014810.468:59095): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014810.468:59096): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014810.469:59097): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252044 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014810.505:59098): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014810.506:59099): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014810.529:59100): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014810.529:59101): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014810.530:59102): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252061 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014810.599:59103): pid=252080 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014810.599:59104): pid=252080 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D777274647078647274727574756C6A65626B676B6476717A7861656A67697569203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343831302E323938393039342D3432312D35323731333130333439313530332F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014810.600:59105): pid=252080 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014810.603:59106): pid=252080 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014810.820:59107): pid=252080 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014810.820:59108): pid=252080 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014810.824:59109): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014810.824:59110): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014810.856:59111): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014810.857:59112): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014810.859:59113): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252085 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014810.913:59114): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014810.913:59115): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014810.926:59116): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014810.926:59117): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014810.928:59118): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252101 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014810.962:59119): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014810.963:59120): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014810.975:59121): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014810.975:59122): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014810.977:59123): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252118 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014811.048:59124): pid=252137 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014811.048:59125): pid=252137 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6478656C616F647377757064627376666C776C70726A6D76797076666D796F75203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343831302E323938393039342D3432312D35323731333130333439313530332F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014811.049:59126): pid=252137 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014811.052:59127): pid=252137 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014811.281:59128): pid=252137 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014811.281:59129): pid=252137 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014811.286:59130): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014811.286:59131): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014811.304:59132): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014811.304:59133): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014811.306:59134): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252140 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014811.335:59135): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014811.335:59136): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014811.614:59137): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014811.614:59138): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014811.616:59139): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252157 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014811.649:59140): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014811.649:59141): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014811.670:59142): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014811.671:59143): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014811.704:59144): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252173 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014811.744:59145): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014811.744:59146): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014811.780:59147): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014811.780:59148): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014811.781:59149): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252195 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014811.829:59150): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014811.829:59151): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014811.847:59152): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014811.848:59153): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014811.849:59154): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252211 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014811.879:59155): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014811.879:59156): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014811.893:59157): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014811.893:59158): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014811.894:59159): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252228 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014811.949:59160): pid=252247 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014811.949:59161): pid=252247 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6779746B657978657A696F6E70666E6E766A63736F616F71747A686A74736A203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343831312E3635313236372D3439302D3136313736393432343536303135322F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014811.950:59162): pid=252247 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014811.953:59163): pid=252247 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014812.153:59164): pid=252247 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014812.154:59165): pid=252247 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014812.159:59166): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014812.159:59167): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014812.173:59168): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014812.173:59169): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014812.175:59170): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252250 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014812.207:59171): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014812.207:59172): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014812.345:59173): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014812.345:59174): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014812.347:59175): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252267 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014812.383:59176): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014812.383:59177): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014812.404:59178): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014812.404:59179): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014812.406:59180): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252283 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014812.445:59181): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014812.445:59182): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1765014812.476:59183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014812.479:59184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765014812.485:59185): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014812.485:59186): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014812.487:59187): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252307 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014812.557:59188): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014812.558:59189): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014812.574:59190): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014812.574:59191): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014812.576:59192): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252355 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014812.614:59193): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014812.614:59194): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014812.643:59195): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014812.643:59196): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014812.648:59197): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252377 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=SERVICE_STOP msg=audit(1765014812.671:59198): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014812.700:59199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765014812.722:59200): pid=252398 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014812.722:59201): pid=252398 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7361697164616D73727A61707777666678766F6177767674657A6C6D776B7A70203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343831322E333835373438342D3531352D3136313530323437323531333236302F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014812.723:59202): pid=252398 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014812.728:59203): pid=252398 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014813.002:59204): pid=252398 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014813.002:59205): pid=252398 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014813.007:59206): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014813.007:59207): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014813.036:59208): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014813.036:59209): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014813.038:59210): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252403 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014813.105:59211): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014813.105:59212): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014813.136:59213): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014813.136:59214): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014813.138:59215): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252419 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_LOGIN msg=audit(1765014813.138:59216): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014813.138:59217): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765014813.180:59218): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014813.180:59219): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014813.199:59220): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014813.199:59221): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014813.201:59222): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252453 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014813.209:59223): pid=252420 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014813.209:59224): pid=252420 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014813.210:59225): pid=252420 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014813.212:59226): pid=252420 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014813.216:59227): pid=252420 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014813.217:59228): pid=252420 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014813.220:59229): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014813.221:59230): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014813.272:59231): pid=252473 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014813.273:59232): pid=252473 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D7976756F6564716471796C6C7A706876626E6F7A67696F7A736F6D616A7275203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343831322E333835373438342D3531352D3136313530323437323531333236302F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014813.273:59233): pid=252473 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014813.276:59234): pid=252473 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014813.491:59235): pid=252473 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014813.491:59236): pid=252473 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014813.495:59237): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014813.495:59238): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014813.514:59239): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014813.514:59240): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014813.516:59241): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252476 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014813.550:59242): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014813.550:59243): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014813.631:59244): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014813.631:59245): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014813.633:59246): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252493 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014813.669:59247): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014813.669:59248): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014813.684:59249): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014813.684:59250): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014813.685:59251): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252509 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014813.726:59252): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014813.726:59253): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014813.752:59254): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014813.752:59255): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014813.753:59256): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252531 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014813.826:59257): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014813.826:59258): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014813.861:59259): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014813.861:59260): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014813.862:59261): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252547 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014813.898:59262): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014813.898:59263): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014813.965:59264): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014813.965:59265): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014813.967:59266): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252564 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014814.039:59267): pid=252583 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014814.040:59268): pid=252583 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7974627567777A6277796B617776616877786E716D6768717A70796B76627566203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343831332E363731363737362D3535312D3231363130373930393333313736392F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014814.040:59269): pid=252583 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014814.044:59270): pid=252583 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014814.250:59271): pid=252583 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014814.251:59272): pid=252583 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014814.254:59273): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014814.254:59274): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014814.294:59275): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014814.294:59276): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014814.296:59277): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252588 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014814.339:59278): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014814.339:59279): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014814.361:59280): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014814.361:59281): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014814.362:59282): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252604 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014814.396:59283): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014814.397:59284): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014814.417:59285): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014814.417:59286): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014814.419:59287): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252621 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014814.486:59288): pid=252640 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014814.486:59289): pid=252640 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746F7A7A6266626A6B68766C746870777269646B75696A786F666B6B64687A67203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343831332E363731363737362D3535312D3231363130373930393333313736392F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014814.486:59290): pid=252640 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014814.489:59291): pid=252640 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014814.722:59292): pid=252640 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014814.722:59293): pid=252640 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014814.726:59294): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014814.726:59295): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014814.742:59296): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014814.742:59297): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014814.743:59298): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252643 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014814.778:59299): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014814.778:59300): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014815.169:59301): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014815.169:59302): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014815.170:59303): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252660 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014815.204:59304): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014815.204:59305): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014815.220:59306): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014815.220:59307): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014815.221:59308): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252676 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014815.262:59309): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014815.262:59310): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1765014815.472:59311): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014815.617:59312): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765014816.116:59313): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014816.116:59314): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014816.117:59315): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252718 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014816.225:59316): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014816.225:59317): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014816.246:59318): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014816.246:59319): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014816.247:59320): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252734 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014816.285:59321): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014816.285:59322): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014816.313:59323): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014816.313:59324): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014816.315:59325): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252751 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014816.389:59326): pid=252770 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014816.389:59327): pid=252770 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7678696A79686177726C616A776A6F7A7362756B6C6C6E6E6B6A637A7A686474203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343831352E32303633312D3538362D3230393637353636323135343532352F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014816.390:59328): pid=252770 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014816.393:59329): pid=252770 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=BPF msg=audit(1765014817.031:59330): prog-id=1906 op=LOAD
type=BPF msg=audit(1765014817.031:59331): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014817.039:59332): prog-id=1907 op=LOAD
type=BPF msg=audit(1765014817.039:59333): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014817.046:59334): prog-id=1908 op=LOAD
type=BPF msg=audit(1765014817.046:59335): prog-id=1909 op=LOAD
type=BPF msg=audit(1765014817.046:59336): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014817.046:59337): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014817.048:59338): prog-id=1910 op=LOAD
type=BPF msg=audit(1765014817.048:59339): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014817.049:59340): prog-id=1911 op=LOAD
type=BPF msg=audit(1765014817.050:59341): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014817.050:59342): prog-id=1912 op=LOAD
type=BPF msg=audit(1765014817.050:59343): prog-id=1913 op=LOAD
type=BPF msg=audit(1765014817.050:59344): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014817.050:59345): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014817.053:59346): prog-id=1914 op=LOAD
type=BPF msg=audit(1765014817.053:59347): prog-id=1915 op=LOAD
type=BPF msg=audit(1765014817.053:59348): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014817.053:59349): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014817.055:59350): prog-id=1916 op=LOAD
type=BPF msg=audit(1765014817.055:59351): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014817.056:59352): prog-id=1917 op=LOAD
type=BPF msg=audit(1765014817.056:59353): prog-id=1918 op=LOAD
type=BPF msg=audit(1765014817.056:59354): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014817.056:59355): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765014817.148:59356): pid=252770 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014817.148:59357): pid=252770 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014817.153:59358): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014817.153:59359): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014817.218:59360): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014817.218:59361): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014817.219:59362): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252811 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014817.260:59363): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014817.260:59364): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014817.341:59365): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014817.341:59366): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014817.343:59367): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252828 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014817.377:59368): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014817.378:59369): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014817.388:59370): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014817.389:59371): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014817.390:59372): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252844 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014817.432:59373): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014817.432:59374): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014817.463:59375): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014817.463:59376): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014817.465:59377): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252866 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014817.525:59378): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014817.525:59379): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014817.546:59380): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014817.546:59381): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014817.548:59382): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252882 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014817.583:59383): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014817.583:59384): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014817.606:59385): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014817.606:59386): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014817.608:59387): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252899 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014817.680:59388): pid=252918 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014817.681:59389): pid=252918 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E696C6F666D69736B737767796D67736262686C726F76646B6D6D6873766D76203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343831372E333739333331362D3631302D3138353430343137313236363136392F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014817.682:59390): pid=252918 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014817.689:59391): pid=252918 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014817.923:59392): pid=252918 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014817.923:59393): pid=252918 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014817.927:59394): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014817.928:59395): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014818.609:59396): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014818.609:59397): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014818.611:59398): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252923 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014818.670:59399): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014818.670:59400): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014818.682:59401): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014818.682:59402): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014818.684:59403): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252939 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014818.718:59404): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014818.718:59405): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014818.731:59406): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014818.732:59407): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014818.733:59408): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252956 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014818.805:59409): pid=252975 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014818.805:59410): pid=252975 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6E6773767A6B71796D646F746C696B717A6C6E767676636371726A75786B64203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343831372E333739333331362D3631302D3138353430343137313236363136392F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014818.806:59411): pid=252975 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014818.810:59412): pid=252975 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014819.074:59413): pid=252975 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014819.075:59414): pid=252975 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014819.079:59415): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014819.079:59416): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014819.108:59417): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014819.108:59418): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014819.109:59419): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252978 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014819.145:59420): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014819.145:59421): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014819.304:59422): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014819.304:59423): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014819.306:59424): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=252995 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014819.341:59425): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014819.341:59426): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014819.358:59427): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014819.358:59428): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014819.359:59429): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253011 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014819.398:59430): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014819.399:59431): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014819.457:59432): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014819.457:59433): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014819.459:59434): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253033 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014819.514:59435): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014819.514:59436): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014819.529:59437): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014819.530:59438): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014819.531:59439): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253049 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014819.568:59440): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014819.568:59441): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014819.586:59442): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014819.586:59443): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014819.588:59444): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253066 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014819.656:59445): pid=253085 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014819.656:59446): pid=253085 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726368686E6276756664626A6C6D7466726273636E70716A6B6B6E7570776E72203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343831392E3334333536372D3634372D3233323132313034313137313439302F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014819.657:59447): pid=253085 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014819.660:59448): pid=253085 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014819.890:59449): pid=253085 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014819.891:59450): pid=253085 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014819.895:59451): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014819.895:59452): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014819.920:59453): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014819.920:59454): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014819.922:59455): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253090 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014819.975:59456): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014819.975:59457): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014819.988:59458): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014819.988:59459): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014819.990:59460): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253106 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014820.024:59461): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014820.024:59462): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014820.036:59463): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014820.036:59464): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014820.037:59465): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253123 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014820.099:59466): pid=253142 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014820.099:59467): pid=253142 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7877626A6C6B6C70717269766178696561616870766378676C6F6C766F726F63203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343831392E3334333536372D3634372D3233323132313034313137313439302F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014820.099:59468): pid=253142 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014820.101:59469): pid=253142 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014820.316:59470): pid=253142 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014820.317:59471): pid=253142 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014820.321:59472): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014820.321:59473): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014820.346:59474): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014820.346:59475): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014820.348:59476): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253145 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014820.380:59477): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014820.380:59478): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1765014820.476:59479): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765014820.480:59480): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014820.480:59481): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014820.482:59482): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253163 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014820.515:59483): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014820.515:59484): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014820.536:59485): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014820.537:59486): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014820.538:59487): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253189 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014820.579:59488): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014820.580:59489): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_STOP msg=audit(1765014820.606:59490): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765014820.620:59491): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014820.620:59492): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014820.623:59493): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253219 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014820.682:59494): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014820.682:59495): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014820.695:59496): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014820.695:59497): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014820.697:59498): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253236 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014820.731:59499): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014820.731:59500): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014820.756:59501): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014820.756:59502): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014820.758:59503): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253253 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014820.827:59504): pid=253272 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014820.828:59505): pid=253272 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77736167766E776870696D696C6862726E6B786C6676756372707A6D79726666203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343832302E353137373337342D3638322D3237363331373135353830333239322F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014820.828:59506): pid=253272 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014820.832:59507): pid=253272 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=BPF msg=audit(1765014821.457:59508): prog-id=1919 op=LOAD
type=BPF msg=audit(1765014821.457:59509): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014821.461:59510): prog-id=1920 op=LOAD
type=BPF msg=audit(1765014821.461:59511): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014821.464:59512): prog-id=1921 op=LOAD
type=BPF msg=audit(1765014821.464:59513): prog-id=1922 op=LOAD
type=BPF msg=audit(1765014821.464:59514): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014821.464:59515): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014821.465:59516): prog-id=1923 op=LOAD
type=BPF msg=audit(1765014821.465:59517): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014821.465:59518): prog-id=1924 op=LOAD
type=BPF msg=audit(1765014821.466:59519): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014821.466:59520): prog-id=1925 op=LOAD
type=BPF msg=audit(1765014821.466:59521): prog-id=1926 op=LOAD
type=BPF msg=audit(1765014821.466:59522): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014821.466:59523): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014821.467:59524): prog-id=1927 op=LOAD
type=BPF msg=audit(1765014821.467:59525): prog-id=1928 op=LOAD
type=BPF msg=audit(1765014821.467:59526): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014821.467:59527): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014821.468:59528): prog-id=1929 op=LOAD
type=BPF msg=audit(1765014821.468:59529): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014821.468:59530): prog-id=1930 op=LOAD
type=BPF msg=audit(1765014821.468:59531): prog-id=1931 op=LOAD
type=BPF msg=audit(1765014821.468:59532): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014821.468:59533): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765014821.549:59534): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014821.549:59535): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014821.579:59536): pid=253272 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014821.579:59537): pid=253272 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014821.583:59538): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014821.583:59539): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014821.602:59540): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014821.602:59541): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014821.604:59542): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253317 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014821.637:59543): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014821.637:59544): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014822.061:59545): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014822.061:59546): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014822.062:59547): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253334 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014822.097:59548): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014822.097:59549): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014822.112:59550): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014822.112:59551): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014822.114:59552): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253350 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014822.148:59553): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014822.149:59554): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014822.179:59555): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014822.179:59556): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014822.180:59557): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253372 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014822.224:59558): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014822.224:59559): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014822.244:59560): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014822.244:59561): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014822.246:59562): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253388 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014822.278:59563): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014822.278:59564): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014822.294:59565): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014822.294:59566): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014822.297:59567): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253405 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014822.365:59568): pid=253424 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014822.365:59569): pid=253424 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6877746D627A74716F6E687365757266616F74636975636E656373796A6771203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343832322E303939393335332D3731332D3234363238303438363933353631332F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014822.367:59570): pid=253424 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1765014822.384:59571): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765014822.388:59572): pid=253424 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_STOP msg=audit(1765014822.518:59573): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014822.631:59574): pid=253424 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014822.632:59575): pid=253424 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014822.636:59576): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014822.636:59577): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014822.657:59578): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014822.657:59579): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014822.658:59580): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253450 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014822.687:59581): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014822.687:59582): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014822.863:59583): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014822.863:59584): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014822.865:59585): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253467 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014822.897:59586): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014822.897:59587): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014822.914:59588): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014822.914:59589): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014822.915:59590): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253483 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014822.953:59591): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014822.953:59592): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014823.003:59593): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014823.003:59594): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014823.004:59595): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253505 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014823.052:59596): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014823.052:59597): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014823.072:59598): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014823.072:59599): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014823.074:59600): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253521 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014823.106:59601): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014823.106:59602): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014823.119:59603): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014823.119:59604): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014823.120:59605): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253538 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014823.188:59606): pid=253557 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014823.189:59607): pid=253557 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666D736474646E677179746C7675716E736463646C706165687A7A7867746F69203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343832322E393032383538352D3733362D3130373334343336313130373634332F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014823.189:59608): pid=253557 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014823.195:59609): pid=253557 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014823.408:59610): pid=253557 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014823.408:59611): pid=253557 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014823.412:59612): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014823.413:59613): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014823.432:59614): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014823.432:59615): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014823.434:59616): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253560 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014823.468:59617): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014823.468:59618): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014823.487:59619): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014823.487:59620): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014823.488:59621): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253576 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014823.515:59622): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014823.516:59623): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014823.569:59624): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014823.569:59625): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014823.571:59626): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253593 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014823.627:59627): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014823.627:59628): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014823.646:59629): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014823.646:59630): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014823.648:59631): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253609 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014823.683:59632): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014823.683:59633): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014823.699:59634): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014823.699:59635): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014823.700:59636): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253626 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014823.765:59637): pid=253645 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014823.765:59638): pid=253645 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6664727A67666F6C7162636E7268646473777A6964696D616F686A6A65786974203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343832322E393032383538352D3733362D3130373334343336313130373634332F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014823.766:59639): pid=253645 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014823.769:59640): pid=253645 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014823.979:59641): pid=253645 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014823.979:59642): pid=253645 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014823.983:59643): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014823.984:59644): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014824.006:59645): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014824.006:59646): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014824.008:59647): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253648 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014824.038:59648): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014824.039:59649): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014824.158:59650): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014824.159:59651): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014824.160:59652): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253665 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014824.192:59653): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014824.193:59654): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014824.208:59655): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014824.208:59656): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014824.209:59657): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253681 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014824.248:59658): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014824.248:59659): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014824.276:59660): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014824.276:59661): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014824.277:59662): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253703 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014824.334:59663): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014824.335:59664): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014824.358:59665): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014824.358:59666): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014824.360:59667): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253719 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014824.397:59668): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014824.397:59669): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014824.418:59670): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014824.418:59671): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014824.420:59672): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253736 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014824.488:59673): pid=253755 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014824.489:59674): pid=253755 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69696A756E64626E6F6B62666676746F61616464706574726F736E6779756375203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343832342E313935343235332D3738312D3234323935333631303437383132382F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014824.489:59675): pid=253755 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014824.493:59676): pid=253755 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014824.722:59677): pid=253755 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014824.722:59678): pid=253755 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014824.726:59679): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014824.726:59680): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014824.742:59681): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014824.742:59682): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014824.743:59683): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253758 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014824.768:59684): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014824.768:59685): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014824.961:59686): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014824.963:59687): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014824.964:59688): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253775 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014825.007:59689): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014825.008:59690): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014825.024:59691): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014825.024:59692): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014825.026:59693): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253791 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014825.068:59694): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014825.069:59695): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014825.114:59696): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014825.115:59697): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014825.116:59698): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253813 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014825.179:59699): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014825.179:59700): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014825.198:59701): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014825.198:59702): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014825.199:59703): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253829 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014825.231:59704): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014825.231:59705): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014825.244:59706): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014825.244:59707): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014825.246:59708): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253846 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014825.311:59709): pid=253865 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014825.312:59710): pid=253865 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76746D6162696B79636668657A7A736C666C63756F687A7972657163766D6E63203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343832352E303133303030352D3830352D31313938333333353737363035332F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014825.312:59711): pid=253865 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014825.315:59712): pid=253865 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014825.514:59713): pid=253865 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014825.514:59714): pid=253865 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014825.518:59715): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014825.518:59716): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014825.556:59717): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014825.556:59718): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014825.558:59719): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253868 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014825.597:59720): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014825.597:59721): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014825.617:59722): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014825.617:59723): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014825.619:59724): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253884 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014825.650:59725): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014825.651:59726): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014825.683:59727): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014825.683:59728): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014825.684:59729): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253901 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014825.748:59730): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014825.749:59731): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014825.768:59732): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014825.768:59733): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014825.769:59734): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253917 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014825.803:59735): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014825.803:59736): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014825.820:59737): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014825.820:59738): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014825.822:59739): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253934 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014825.888:59740): pid=253953 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014825.888:59741): pid=253953 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70647979706E71626C6C6D6D7A686766667A6563647466736261786170697374203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343832352E303133303030352D3830352D31313938333333353737363035332F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014825.889:59742): pid=253953 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014825.892:59743): pid=253953 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014826.113:59744): pid=253953 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014826.114:59745): pid=253953 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014826.117:59746): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014826.118:59747): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014826.133:59748): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014826.133:59749): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014826.135:59750): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253956 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014826.164:59751): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014826.164:59752): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014826.423:59753): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014826.424:59754): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014826.425:59755): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253973 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014826.453:59756): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014826.454:59757): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014826.473:59758): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014826.473:59759): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014826.474:59760): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=253989 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014826.504:59761): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014826.505:59762): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014826.673:59763): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014826.673:59764): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014826.674:59765): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254011 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014826.729:59766): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014826.729:59767): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014826.743:59768): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014826.743:59769): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014826.745:59770): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254027 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014826.775:59771): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014826.775:59772): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014826.790:59773): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014826.790:59774): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014826.791:59775): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254044 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014826.882:59776): pid=254063 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014826.882:59777): pid=254063 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716765786A7662696C7562636666747177796367756B6D6F796D676F71627967203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343832362E343535363435332D3835362D3232393632313533343232393030352F416E736962616C6C5A5F636F6E7461696E65725F636F6E6669675F646174612E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014826.882:59778): pid=254063 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014826.884:59779): pid=254063 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014827.098:59780): pid=254063 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014827.098:59781): pid=254063 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014827.102:59782): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014827.102:59783): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014827.124:59784): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014827.125:59785): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014827.126:59786): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254066 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014827.154:59787): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014827.154:59788): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014827.363:59789): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014827.363:59790): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014827.365:59791): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254083 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014827.395:59792): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014827.395:59793): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014827.407:59794): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014827.407:59795): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014827.409:59796): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254099 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014827.443:59797): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014827.443:59798): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014827.657:59799): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014827.658:59800): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014827.659:59801): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254121 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014827.717:59802): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014827.717:59803): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014827.738:59804): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014827.738:59805): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014827.739:59806): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254137 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014827.763:59807): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014827.763:59808): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014827.787:59809): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014827.787:59810): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014827.788:59811): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254154 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014827.835:59812): pid=254173 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014827.835:59813): pid=254173 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736C786D6861786B6A787669746A736A756D6C766B706E627461627465727466203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343832372E333937333338322D3838332D36383330373433383337303239332F416E736962616C6C5A5F636F6E7461696E65725F636F6E6669675F686173682E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014827.836:59814): pid=254173 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1765014827.855:59815): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765014827.857:59816): pid=254173 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_STOP msg=audit(1765014828.288:59817): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014828.358:59818): pid=254173 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014828.358:59819): pid=254173 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014828.362:59820): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014828.362:59821): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014828.382:59822): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014828.382:59823): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014828.383:59824): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254202 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014828.418:59825): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014828.419:59826): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014828.615:59827): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014828.616:59828): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014828.617:59829): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254219 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014828.649:59830): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014828.649:59831): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014828.669:59832): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014828.669:59833): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014828.670:59834): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254235 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014828.706:59835): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014828.706:59836): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014829.517:59837): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014829.517:59838): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014829.519:59839): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254257 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014829.565:59840): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014829.565:59841): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014829.582:59842): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014829.582:59843): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014829.584:59844): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254273 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014829.613:59845): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014829.614:59846): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014829.634:59847): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014829.634:59848): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014829.635:59849): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254290 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014829.702:59850): pid=254309 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014829.702:59851): pid=254309 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726165696B6475636F64617978666D7674737765636474687465767A6F6D6775203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343832382E363531373533372D3931302D35323030373336343933383137392F416E736962616C6C5A5F706F646D616E5F636F6E7461696E65725F696E666F2E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014829.703:59852): pid=254309 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014829.707:59853): pid=254309 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014830.307:59854): pid=254309 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014830.308:59855): pid=254309 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014830.311:59856): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014830.311:59857): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014830.366:59858): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014830.367:59859): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014830.369:59860): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254339 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014830.399:59861): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014830.399:59862): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014833.561:59863): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014833.561:59864): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014833.563:59865): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254356 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014833.593:59866): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014833.594:59867): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014833.605:59868): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014833.605:59869): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014833.606:59870): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254372 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014833.650:59871): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014833.650:59872): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014833.918:59873): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014833.919:59874): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014833.920:59875): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254394 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014833.981:59876): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014833.981:59877): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014834.000:59878): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014834.000:59879): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014834.002:59880): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254410 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014834.035:59881): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014834.036:59882): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014834.050:59883): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014834.050:59884): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014834.052:59885): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254427 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014834.124:59886): pid=254446 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014834.125:59887): pid=254446 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D777861706E6961696F61776365796777796B7476686A61616A79677572687966203B202F7573722F62696E2F707974686F6E33202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343833332E353936313431362D3934392D3133363836393237343434383438352F416E736962616C6C5A5F6564706D5F636F6E7461696E65725F6D616E6167652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014834.126:59888): pid=254446 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014834.129:59889): pid=254446 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014834.922:59890): pid=254446 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014834.923:59891): pid=254446 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014834.927:59892): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014834.927:59893): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014834.951:59894): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014834.951:59895): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014834.953:59896): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254525 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014834.988:59897): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014834.988:59898): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014835.095:59899): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014835.096:59900): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014835.097:59901): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254542 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014835.130:59902): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014835.130:59903): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014835.140:59904): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014835.140:59905): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014835.142:59906): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254558 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014835.178:59907): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014835.179:59908): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014835.201:59909): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014835.201:59910): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014835.202:59911): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254580 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014835.251:59912): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014835.251:59913): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014835.270:59914): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014835.270:59915): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014835.271:59916): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254596 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014835.304:59917): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014835.304:59918): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014835.321:59919): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014835.322:59920): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014835.323:59921): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254613 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014835.395:59922): pid=254632 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014835.396:59923): pid=254632 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7870726D6A6E766D687369777A7478716365786D746466786963616375676269203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343833352E3133323335342D3937332D3234393939313734373938353636302F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014835.397:59924): pid=254632 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014835.401:59925): pid=254632 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014835.626:59926): pid=254632 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014835.626:59927): pid=254632 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014835.630:59928): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014835.631:59929): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014835.647:59930): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014835.647:59931): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014835.649:59932): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254637 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014835.680:59933): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014835.680:59934): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014835.911:59935): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014835.911:59936): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014835.913:59937): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254654 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014835.945:59938): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014835.945:59939): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014836.010:59940): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014836.011:59941): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014836.013:59942): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254670 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014836.051:59943): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014836.051:59944): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014836.095:59945): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014836.095:59946): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014836.096:59947): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254692 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014836.149:59948): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014836.150:59949): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014836.161:59950): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014836.161:59951): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014836.163:59952): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254708 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014836.194:59953): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014836.194:59954): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014836.205:59955): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014836.206:59956): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014836.207:59957): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254725 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014836.271:59958): pid=254744 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014836.271:59959): pid=254744 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E74746F6B7A6866706F796F7675677A646473797472716E72796C716C617A6F203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343833352E393438313431332D313030302D35323634393837303939323535392F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014836.272:59960): pid=254744 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014836.274:59961): pid=254744 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014836.490:59962): pid=254744 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014836.491:59963): pid=254744 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014836.495:59964): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014836.495:59965): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014836.521:59966): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014836.522:59967): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014836.523:59968): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254747 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014836.563:59969): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014836.563:59970): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014836.586:59971): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014836.586:59972): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014836.587:59973): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254763 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014836.615:59974): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014836.615:59975): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014836.642:59976): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014836.642:59977): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014836.643:59978): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254780 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014836.709:59979): pid=254799 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014836.710:59980): pid=254799 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6264746870777972787167626C7572766F7867787A647874767462686C7A6B6C203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343833352E393438313431332D313030302D35323634393837303939323535392F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014836.710:59981): pid=254799 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014836.713:59982): pid=254799 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014836.916:59983): pid=254799 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014836.917:59984): pid=254799 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014836.921:59985): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014836.921:59986): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014836.937:59987): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014836.937:59988): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014836.938:59989): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254802 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014836.967:59990): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014836.967:59991): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014836.980:59992): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014836.980:59993): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014836.981:59994): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254818 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014837.038:59995): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014837.038:59996): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014837.154:59997): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014837.154:59998): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014837.155:59999): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254840 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014837.195:60000): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014837.195:60001): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014837.246:60002): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014837.246:60003): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014837.247:60004): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254856 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014837.298:60005): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014837.298:60006): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014837.310:60007): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014837.310:60008): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014837.311:60009): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254872 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014837.346:60010): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014837.346:60011): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014837.364:60012): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014837.364:60013): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014837.366:60014): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254889 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014837.416:60015): pid=254908 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014837.416:60016): pid=254908 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61757873666E76676C68686F716D6D777064736269696366716F616A696E7562203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343833362E393639393139372D313030302D3233333237373537343032323030362F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014837.416:60017): pid=254908 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014837.419:60018): pid=254908 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014837.651:60019): pid=254908 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014837.651:60020): pid=254908 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014837.655:60021): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014837.655:60022): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014837.697:60023): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014837.697:60024): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014837.698:60025): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254911 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014837.760:60026): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014837.761:60027): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014837.776:60028): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014837.776:60029): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014837.778:60030): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254927 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014837.810:60031): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014837.810:60032): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014837.824:60033): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014837.824:60034): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014837.825:60035): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=254944 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014837.889:60036): pid=254963 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014837.889:60037): pid=254963 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646B737A66756175746D6E6A796B627177626466617A7665676E71636567646B203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343833362E393639393139372D313030302D3233333237373537343032323030362F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014837.890:60038): pid=254963 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014837.946:60039): pid=254963 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1765014837.948:60040): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014838.084:60041): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765014838.551:60042): prog-id=1932 op=LOAD
type=BPF msg=audit(1765014838.551:60043): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014838.555:60044): prog-id=1933 op=LOAD
type=BPF msg=audit(1765014838.555:60045): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014838.558:60046): prog-id=1934 op=LOAD
type=BPF msg=audit(1765014838.558:60047): prog-id=1935 op=LOAD
type=BPF msg=audit(1765014838.558:60048): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014838.558:60049): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014838.559:60050): prog-id=1936 op=LOAD
type=BPF msg=audit(1765014838.559:60051): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014838.560:60052): prog-id=1937 op=LOAD
type=BPF msg=audit(1765014838.560:60053): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014838.560:60054): prog-id=1938 op=LOAD
type=BPF msg=audit(1765014838.560:60055): prog-id=1939 op=LOAD
type=BPF msg=audit(1765014838.560:60056): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014838.560:60057): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014838.562:60058): prog-id=1940 op=LOAD
type=BPF msg=audit(1765014838.562:60059): prog-id=1941 op=LOAD
type=BPF msg=audit(1765014838.562:60060): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014838.562:60061): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014838.563:60062): prog-id=1942 op=LOAD
type=BPF msg=audit(1765014838.563:60063): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014838.563:60064): prog-id=1943 op=LOAD
type=BPF msg=audit(1765014838.563:60065): prog-id=1944 op=LOAD
type=BPF msg=audit(1765014838.563:60066): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014838.563:60067): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765014838.608:60068): pid=254963 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014838.608:60069): pid=254963 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014838.613:60070): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014838.613:60071): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014838.742:60072): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014838.742:60073): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014838.744:60074): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=255022 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014838.815:60075): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014838.815:60076): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014838.831:60077): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014838.831:60078): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014838.834:60079): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=255038 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014838.859:60080): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014838.859:60081): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014838.883:60082): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014838.883:60083): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014838.884:60084): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=255055 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014838.939:60085): pid=255074 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014838.940:60086): pid=255074 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7775686A7A666362696F737770686A6173666D6B69726E64706F646A6A71616D203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343833362E393639393139372D313030302D3233333237373537343032323030362F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014838.940:60087): pid=255074 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014838.944:60088): pid=255074 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=BPF msg=audit(1765014839.692:60089): prog-id=1945 op=LOAD
type=BPF msg=audit(1765014839.692:60090): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014839.696:60091): prog-id=1946 op=LOAD
type=BPF msg=audit(1765014839.696:60092): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014839.699:60093): prog-id=1947 op=LOAD
type=BPF msg=audit(1765014839.699:60094): prog-id=1948 op=LOAD
type=BPF msg=audit(1765014839.699:60095): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014839.699:60096): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014839.700:60097): prog-id=1949 op=LOAD
type=BPF msg=audit(1765014839.700:60098): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014839.701:60099): prog-id=1950 op=LOAD
type=BPF msg=audit(1765014839.701:60100): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014839.701:60101): prog-id=1951 op=LOAD
type=BPF msg=audit(1765014839.701:60102): prog-id=1952 op=LOAD
type=BPF msg=audit(1765014839.701:60103): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014839.701:60104): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014839.702:60105): prog-id=1953 op=LOAD
type=BPF msg=audit(1765014839.702:60106): prog-id=1954 op=LOAD
type=BPF msg=audit(1765014839.702:60107): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014839.702:60108): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014839.703:60109): prog-id=1955 op=LOAD
type=BPF msg=audit(1765014839.703:60110): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014839.703:60111): prog-id=1956 op=LOAD
type=BPF msg=audit(1765014839.704:60112): prog-id=1957 op=LOAD
type=BPF msg=audit(1765014839.704:60113): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014839.704:60114): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014839.840:60115): prog-id=1958 op=LOAD
type=SYSCALL msg=audit(1765014839.840:60115): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffd66659850 a2=90 a3=9500000001 items=0 ppid=255131 pid=255132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765014839.840:60115): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F383837363062623463366666326365373339613534336464643138363261
type=SERVICE_START msg=audit(1765014839.862:60116): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=edpm_neutron_sriov_agent comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765014839.881:60117): pid=255136 uid=42435 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="neutron" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42435)" AUID="unset"
type=USER_CMD msg=audit(1765014839.881:60118): pid=255136 uid=42435 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="unknown(42435)" AUID="unset"
type=CRED_REFR msg=audit(1765014839.882:60119): pid=255136 uid=42435 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42435)" AUID="unset"
type=USER_START msg=audit(1765014839.884:60120): pid=255136 uid=42435 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42435)" AUID="unset"
type=USER_END msg=audit(1765014839.906:60121): pid=255074 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014839.907:60122): pid=255074 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014839.912:60123): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014839.912:60124): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014839.934:60125): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014839.934:60126): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014839.936:60127): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=255139 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014839.973:60128): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014839.973:60129): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765014839.975:60130): pid=255136 uid=42435 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42435)" AUID="unset"
type=CRED_DISP msg=audit(1765014839.975:60131): pid=255136 uid=42435 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42435)" AUID="unset"
type=USER_ACCT msg=audit(1765014839.995:60132): pid=255157 uid=42435 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="neutron" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42435)" AUID="unset"
type=USER_CMD msg=audit(1765014839.995:60133): pid=255157 uid=42435 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_copy_cacerts" exe="/usr/bin/sudo" terminal=? res=success'UID="unknown(42435)" AUID="unset"
type=CRED_REFR msg=audit(1765014839.996:60134): pid=255157 uid=42435 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42435)" AUID="unset"
type=USER_START msg=audit(1765014839.997:60135): pid=255157 uid=42435 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42435)" AUID="unset"
type=USER_END msg=audit(1765014840.001:60136): pid=255157 uid=42435 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42435)" AUID="unset"
type=CRED_DISP msg=audit(1765014840.001:60137): pid=255157 uid=42435 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42435)" AUID="unset"
type=USER_LOGIN msg=audit(1765014840.155:60138): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014840.156:60139): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014840.157:60140): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=255160 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014840.188:60141): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014840.188:60142): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014840.200:60143): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014840.200:60144): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014840.202:60145): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=255176 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014840.238:60146): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014840.238:60147): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014840.266:60148): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014840.266:60149): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014840.267:60150): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=255198 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014840.326:60151): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014840.327:60152): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014840.341:60153): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014840.341:60154): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014840.342:60155): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=255216 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014840.376:60156): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014840.376:60157): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014840.394:60158): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014840.394:60159): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014840.396:60160): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=255233 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014840.465:60161): pid=255253 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014840.465:60162): pid=255253 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F717A6A696B61777374776378656264737375676F776D6E7076646C6666756B203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343834302E3138393730352D313038342D3130333635313335333838373531322F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014840.466:60163): pid=255253 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014840.471:60164): pid=255253 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=BPF msg=audit(1765014840.916:60165): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1765014841.087:60166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=edpm_neutron_sriov_agent comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765014841.181:60167): prog-id=1959 op=LOAD
type=SYSCALL msg=audit(1765014841.181:60167): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffd1694a920 a2=90 a3=9500000001 items=0 ppid=255311 pid=255312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765014841.181:60167): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F383837363062623463366666326365373339613534336464643138363261
type=SERVICE_START msg=audit(1765014841.199:60168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=edpm_neutron_sriov_agent comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765014841.216:60169): pid=255316 uid=42435 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="neutron" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42435)" AUID="unset"
type=USER_CMD msg=audit(1765014841.217:60170): pid=255316 uid=42435 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="unknown(42435)" AUID="unset"
type=CRED_REFR msg=audit(1765014841.218:60171): pid=255316 uid=42435 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42435)" AUID="unset"
type=USER_START msg=audit(1765014841.220:60172): pid=255316 uid=42435 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42435)" AUID="unset"
type=USER_END msg=audit(1765014841.241:60173): pid=255253 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014841.242:60174): pid=255253 uid=1000 auid=1000 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014841.245:60175): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014841.245:60176): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765014841.292:60177): pid=255316 uid=42435 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42435)" AUID="unset"
type=CRED_DISP msg=audit(1765014841.293:60178): pid=255316 uid=42435 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42435)" AUID="unset"
type=USER_ACCT msg=audit(1765014841.306:60179): pid=255320 uid=42435 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="neutron" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42435)" AUID="unset"
type=USER_CMD msg=audit(1765014841.306:60180): pid=255320 uid=42435 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_copy_cacerts" exe="/usr/bin/sudo" terminal=? res=success'UID="unknown(42435)" AUID="unset"
type=CRED_REFR msg=audit(1765014841.306:60181): pid=255320 uid=42435 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42435)" AUID="unset"
type=USER_START msg=audit(1765014841.308:60182): pid=255320 uid=42435 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42435)" AUID="unset"
type=USER_END msg=audit(1765014841.311:60183): pid=255320 uid=42435 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42435)" AUID="unset"
type=CRED_DISP msg=audit(1765014841.311:60184): pid=255320 uid=42435 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42435)" AUID="unset"
type=USER_LOGIN msg=audit(1765014841.812:60185): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014841.812:60186): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014841.813:60187): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=255326 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014841.847:60188): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014841.847:60189): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014842.202:60190): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=250105 suid=1000 rport=33120 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014842.203:60191): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250105 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014842.205:60192): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1765014842.205:60193): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014842.205:60194): pid=250102 uid=0 auid=1000 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=250102 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=SERVICE_START msg=audit(1765014843.475:60195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014843.478:60196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014843.596:60197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014843.703:60198): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014846.207:60199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014846.326:60200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014849.257:60201): pid=255449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=255449 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765014849.259:60202): pid=255448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=255449 suid=74 rport=33962 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765014849.260:60203): pid=255448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=255449 suid=74 rport=33962 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765014849.388:60204): pid=255448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014849.388:60205): pid=255448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:e0:39:03:0c:58:11:ed:73:22:37:9b:fb:b5:96:ae:e6:c9:d5:b4:79:86:de:e9:6d:a3:5f:2e:d5:1c:00:d2:eb exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765014849.417:60206): pid=255448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014849.417:60207): pid=255448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=255449 suid=74 rport=33962 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765014849.419:60208): pid=255448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765014849.419:60209): pid=255448 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=58 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1765014849.419:60209): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff9eb67e60 a2=4 a3=3e8 items=0 ppid=182854 pid=255448 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=58 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765014849.419:60209): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765014849.421:60210): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1765014849.452:60211): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014849.453:60212): pid=255451 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=255451 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=CRED_ACQ msg=audit(1765014849.454:60213): pid=255451 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1765014849.498:60214): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014849.498:60215): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014849.501:60216): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=255452 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014849.539:60217): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014849.539:60218): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014849.557:60219): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014849.557:60220): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014849.558:60221): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=255468 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014849.597:60222): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014849.597:60223): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014849.879:60224): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014849.879:60225): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014849.881:60226): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=255490 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014849.917:60227): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014849.917:60228): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014849.943:60229): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014849.944:60230): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014849.945:60231): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=255507 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014850.016:60232): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014850.016:60233): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014850.030:60234): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014850.030:60235): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014850.032:60236): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=255523 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014850.068:60237): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014850.069:60238): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014850.085:60239): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014850.085:60240): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014850.087:60241): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=255540 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014850.722:60242): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014850.722:60243): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014850.750:60244): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014850.751:60245): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014850.752:60246): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=255564 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014850.802:60247): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014850.803:60248): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014851.207:60249): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014851.208:60250): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014851.209:60251): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=255581 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014851.240:60252): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014851.241:60253): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014851.255:60254): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014851.255:60255): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014851.256:60256): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=255597 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014851.295:60257): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014851.296:60258): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014851.329:60259): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014851.329:60260): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014851.330:60261): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=255619 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014851.413:60262): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014851.413:60263): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014851.435:60264): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014851.435:60265): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014851.436:60266): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=255635 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014851.469:60267): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014851.469:60268): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1765014851.480:60269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765014851.484:60270): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014851.484:60271): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014851.486:60272): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=255653 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014851.553:60273): pid=255681 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014851.554:60274): pid=255681 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6F7673626A72646F70787A766279787A6A69746F776469636E706F7962746B203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343835312E323433383933392D36372D3136313331393430393234313035372F416E736962616C6C5A5F73657475702E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014851.555:60275): pid=255681 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014851.560:60276): pid=255681 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_STOP msg=audit(1765014851.608:60277): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014852.277:60278): pid=255681 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014852.277:60279): pid=255681 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014852.281:60280): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014852.281:60281): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014852.455:60282): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014852.455:60283): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014852.457:60284): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=255699 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014852.507:60285): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014852.507:60286): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014852.517:60287): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014852.517:60288): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014852.519:60289): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=255715 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014852.550:60290): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014852.550:60291): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014852.572:60292): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014852.572:60293): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014852.574:60294): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=255732 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014852.634:60295): pid=255751 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014852.634:60296): pid=255751 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6F6C6F667A7A686F6B63616D736E6B6B726A71666D7778676A7661716B7975203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343835312E323433383933392D36372D3136313331393430393234313035372F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014852.636:60297): pid=255751 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014852.654:60298): pid=255751 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1765014852.657:60299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014852.790:60300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014856.149:60301): pid=255751 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014856.149:60302): pid=255751 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014856.154:60303): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014856.154:60304): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014856.184:60305): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014856.184:60306): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014856.185:60307): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=255779 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014856.216:60308): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014856.216:60309): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014856.397:60310): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014856.397:60311): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014856.398:60312): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=255796 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014856.430:60313): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014856.430:60314): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014856.452:60315): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014856.452:60316): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014856.453:60317): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=255812 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014856.492:60318): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014856.492:60319): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014856.760:60320): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014856.760:60321): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014856.761:60322): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=255834 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014856.832:60323): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014856.833:60324): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014856.846:60325): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014856.846:60326): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014856.847:60327): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=255850 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014856.874:60328): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014856.874:60329): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014856.885:60330): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014856.885:60331): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014856.887:60332): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=255867 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014856.950:60333): pid=255886 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014856.951:60334): pid=255886 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736A6771676272666766756766646E7476676F7A7362766A7163626B6C79796B203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343835362E343332313830322D3130332D35363637373330303631373838312F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014856.951:60335): pid=255886 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014856.954:60336): pid=255886 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014857.347:60337): pid=255886 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014857.347:60338): pid=255886 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014857.351:60339): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014857.351:60340): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014857.383:60341): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014857.383:60342): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014857.385:60343): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=255892 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014857.419:60344): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014857.419:60345): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1765014858.471:60346): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765014858.623:60347): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014858.623:60348): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014858.625:60349): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=255934 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=SERVICE_STOP msg=audit(1765014858.642:60350): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014858.659:60351): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014858.659:60352): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014858.678:60353): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014858.678:60354): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014858.679:60355): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=255950 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014858.716:60356): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014858.716:60357): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014858.914:60358): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014858.915:60359): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014858.916:60360): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=255972 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014858.968:60361): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014858.968:60362): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014858.985:60363): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014858.985:60364): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014858.987:60365): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=255988 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014859.020:60366): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014859.020:60367): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014859.032:60368): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014859.032:60369): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014859.033:60370): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256005 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014859.098:60371): pid=256024 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014859.099:60372): pid=256024 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746C6D787A667A72706C67657A6370677170647762626475677873686E706D76203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343835382E363632323731332D3133302D3139353833373936333734353632302F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014859.100:60373): pid=256024 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014859.103:60374): pid=256024 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014859.320:60375): pid=256024 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014859.320:60376): pid=256024 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014859.324:60377): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014859.324:60378): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014859.350:60379): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014859.350:60380): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014859.352:60381): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256027 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014859.384:60382): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014859.384:60383): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014859.420:60384): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014859.420:60385): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014859.422:60386): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256044 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014859.452:60387): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014859.452:60388): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014859.472:60389): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014859.472:60390): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014859.473:60391): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256060 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014859.510:60392): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014859.510:60393): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014859.538:60394): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014859.538:60395): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014859.539:60396): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256082 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014859.587:60397): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014859.587:60398): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014859.601:60399): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014859.602:60400): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014859.603:60401): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256098 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014859.635:60402): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014859.635:60403): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014859.654:60404): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014859.654:60405): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014859.655:60406): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256115 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014859.724:60407): pid=256134 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014859.725:60408): pid=256134 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746D6462686C627768756F6C6D7169716175747A74696D7166617A656B6C6C75203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343835392E343534373238342D3133302D33383231363530383437343436392F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014859.725:60409): pid=256134 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014859.728:60410): pid=256134 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014859.946:60411): pid=256134 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014859.946:60412): pid=256134 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014859.950:60413): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014859.950:60414): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014859.964:60415): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014859.964:60416): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014859.966:60417): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256137 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014859.992:60418): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014859.992:60419): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014860.035:60420): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014860.035:60421): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014860.036:60422): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256154 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014860.066:60423): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014860.067:60424): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014860.099:60425): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014860.099:60426): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014860.100:60427): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256170 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014860.139:60428): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014860.139:60429): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014860.170:60430): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014860.170:60431): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014860.171:60432): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256192 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014860.227:60433): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014860.227:60434): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014860.246:60435): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014860.246:60436): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014860.247:60437): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256208 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014860.279:60438): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014860.279:60439): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014860.301:60440): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014860.302:60441): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014860.303:60442): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256225 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014860.371:60443): pid=256244 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014860.371:60444): pid=256244 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79696F70776C706662617A746A626F6A6567637171777575786974756D727771203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343836302E3036383331332D3133302D33333634353833333230313832382F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014860.372:60445): pid=256244 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014860.374:60446): pid=256244 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014860.589:60447): pid=256244 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014860.590:60448): pid=256244 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014860.594:60449): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014860.594:60450): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014860.611:60451): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014860.611:60452): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014860.612:60453): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256247 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014860.643:60454): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014860.644:60455): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014860.689:60456): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014860.690:60457): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014860.691:60458): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256264 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014860.722:60459): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014860.722:60460): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014860.741:60461): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014860.742:60462): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014860.743:60463): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256280 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014860.778:60464): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014860.778:60465): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014860.810:60466): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014860.810:60467): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014860.812:60468): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256302 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014860.874:60469): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014860.874:60470): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014860.899:60471): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014860.899:60472): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014860.900:60473): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256318 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014860.933:60474): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014860.933:60475): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014860.962:60476): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014860.962:60477): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014860.967:60478): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256335 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014861.036:60479): pid=256354 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014861.036:60480): pid=256354 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616A676B6C757577617975727769716B616C74686B636374617A617463666766203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343836302E373234323031322D3133302D3130393632303236343533323839342F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014861.036:60481): pid=256354 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014861.038:60482): pid=256354 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014861.256:60483): pid=256354 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014861.257:60484): pid=256354 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014861.260:60485): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014861.260:60486): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014861.281:60487): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014861.281:60488): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014861.282:60489): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256357 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014861.309:60490): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014861.309:60491): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014861.362:60492): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014861.362:60493): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014861.363:60494): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256374 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014861.394:60495): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014861.394:60496): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014861.419:60497): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014861.419:60498): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014861.421:60499): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256390 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014861.459:60500): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014861.459:60501): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014861.489:60502): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014861.489:60503): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014861.490:60504): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256412 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014861.556:60505): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014861.556:60506): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014861.579:60507): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014861.579:60508): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014861.581:60509): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256428 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014861.616:60510): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014861.616:60511): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014861.656:60512): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014861.656:60513): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014861.658:60514): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256445 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014861.726:60515): pid=256464 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014861.727:60516): pid=256464 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E7A72626B70766C616E6C6F6474736D617062637178646F6862757767777374203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343836312E333936303038372D3133302D31343434383032333930353133362F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014861.727:60517): pid=256464 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014861.730:60518): pid=256464 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014861.964:60519): pid=256464 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014861.964:60520): pid=256464 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014861.968:60521): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014861.969:60522): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014861.982:60523): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014861.982:60524): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014861.983:60525): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256467 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014862.056:60526): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014862.056:60527): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014862.102:60528): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014862.102:60529): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014862.103:60530): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256484 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014862.136:60531): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014862.137:60532): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014862.155:60533): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014862.155:60534): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014862.157:60535): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256500 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014862.199:60536): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014862.199:60537): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014862.229:60538): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014862.229:60539): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014862.230:60540): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256522 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014862.293:60541): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014862.293:60542): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014862.316:60543): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014862.316:60544): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014862.317:60545): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256538 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014862.351:60546): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014862.351:60547): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014862.367:60548): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014862.368:60549): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014862.369:60550): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256555 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014862.435:60551): pid=256574 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014862.435:60552): pid=256574 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73777579786E6D6879646F67676D617178666A76686E796B6F766D7568746575203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343836322E313338323334342D3133302D3138303732393033323832313230332F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014862.437:60553): pid=256574 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014862.441:60554): pid=256574 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014862.660:60555): pid=256574 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014862.661:60556): pid=256574 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014862.665:60557): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014862.665:60558): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014862.691:60559): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014862.691:60560): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014862.693:60561): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256577 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014862.722:60562): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014862.722:60563): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014862.773:60564): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014862.774:60565): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014862.775:60566): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256594 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014862.806:60567): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014862.807:60568): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014862.832:60569): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014862.833:60570): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014862.834:60571): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256610 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014862.872:60572): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014862.872:60573): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014862.915:60574): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014862.915:60575): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014862.916:60576): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256632 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014862.994:60577): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014862.994:60578): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014863.006:60579): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014863.006:60580): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014863.008:60581): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256648 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014863.040:60582): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014863.040:60583): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014863.059:60584): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014863.059:60585): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014863.061:60586): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256665 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014863.126:60587): pid=256684 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014863.127:60588): pid=256684 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6667696661747A717376656C747073737A7A7A7164616969777A776375617A66203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343836322E383133393439362D3133302D3130363239393930313631333732362F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014863.127:60589): pid=256684 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014863.129:60590): pid=256684 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014863.343:60591): pid=256684 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014863.343:60592): pid=256684 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014863.347:60593): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014863.347:60594): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014863.360:60595): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014863.360:60596): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014863.361:60597): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256687 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014863.387:60598): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014863.388:60599): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014863.606:60600): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014863.606:60601): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014863.608:60602): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256705 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014863.643:60603): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014863.643:60604): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014863.655:60605): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014863.655:60606): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014863.657:60607): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256721 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014863.693:60608): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014863.693:60609): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014863.874:60610): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014863.874:60611): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014863.875:60612): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256743 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014863.926:60613): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014863.927:60614): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014863.942:60615): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014863.942:60616): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014863.943:60617): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256759 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014863.973:60618): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014863.974:60619): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014863.992:60620): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014863.992:60621): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014863.994:60622): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256776 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014864.059:60623): pid=256795 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014864.060:60624): pid=256795 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6168726867707175656E66657A666D6F6C7771756476737269786D626B786277203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343836332E363434373038362D3238302D33323134353632353230353336392F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014864.060:60625): pid=256795 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014864.062:60626): pid=256795 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014864.271:60627): pid=256795 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014864.272:60628): pid=256795 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014864.276:60629): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014864.276:60630): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014864.300:60631): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014864.301:60632): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014864.302:60633): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256798 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014864.336:60634): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014864.336:60635): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014864.349:60636): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014864.349:60637): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014864.351:60638): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256814 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014864.377:60639): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014864.377:60640): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014864.643:60641): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014864.643:60642): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014864.645:60643): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256831 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014864.732:60644): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014864.733:60645): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014864.746:60646): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014864.746:60647): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014864.747:60648): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256847 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014864.780:60649): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014864.780:60650): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014864.801:60651): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014864.802:60652): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014864.803:60653): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256864 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014864.871:60654): pid=256883 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014864.871:60655): pid=256883 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756B6B776466616778797472626C6F746B627271666E726E63657471626F6477203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343836332E363434373038362D3238302D33323134353632353230353336392F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014864.872:60656): pid=256883 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014864.876:60657): pid=256883 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014865.086:60658): pid=256883 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014865.087:60659): pid=256883 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014865.090:60660): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014865.090:60661): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014865.109:60662): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014865.109:60663): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014865.110:60664): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256886 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014865.137:60665): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014865.137:60666): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014865.274:60667): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014865.275:60668): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014865.276:60669): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256903 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014865.309:60670): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014865.309:60671): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014865.325:60672): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014865.325:60673): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014865.327:60674): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256919 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014865.366:60675): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014865.366:60676): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014865.414:60677): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014865.414:60678): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014865.416:60679): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256941 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014865.483:60680): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014865.483:60681): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014865.498:60682): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014865.498:60683): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014865.499:60684): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256957 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014865.531:60685): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014865.531:60686): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014865.549:60687): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014865.550:60688): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014865.551:60689): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256974 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014865.794:60690): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014865.794:60691): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014865.816:60692): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014865.816:60693): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014865.817:60694): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=256994 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014865.850:60695): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014865.850:60696): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014865.863:60697): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014865.863:60698): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014865.864:60699): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257010 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014865.890:60700): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014865.890:60701): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014865.918:60702): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014865.918:60703): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014865.920:60704): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257027 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014865.959:60705): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014865.959:60706): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014865.973:60707): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014865.974:60708): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014865.975:60709): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257043 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014865.998:60710): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014865.998:60711): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014866.008:60712): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014866.008:60713): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014866.010:60714): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257060 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014866.216:60715): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014866.217:60716): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014866.718:60717): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014866.719:60718): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014866.720:60719): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257080 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014866.744:60720): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014866.745:60721): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014866.784:60722): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014866.784:60723): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014866.785:60724): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257097 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014866.809:60725): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014866.809:60726): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014866.819:60727): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014866.819:60728): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014866.820:60729): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257113 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014866.849:60730): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014866.849:60731): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014866.875:60732): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014866.875:60733): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014866.876:60734): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257135 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014866.918:60735): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014866.918:60736): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014866.931:60737): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014866.931:60738): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014866.932:60739): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257151 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014866.960:60740): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014866.960:60741): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014866.971:60742): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014866.971:60743): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014866.972:60744): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257168 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014867.213:60745): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014867.213:60746): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014867.230:60747): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014867.230:60748): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014867.231:60749): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257188 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014867.273:60750): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014867.273:60751): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014867.291:60752): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014867.291:60753): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014867.292:60754): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257204 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014867.323:60755): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014867.323:60756): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014867.343:60757): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014867.343:60758): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014867.344:60759): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257221 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014867.397:60760): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014867.397:60761): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014867.417:60762): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014867.417:60763): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014867.419:60764): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257237 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014867.458:60765): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014867.458:60766): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014867.485:60767): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014867.486:60768): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014867.487:60769): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257254 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014867.743:60770): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014867.743:60771): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014867.757:60772): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014867.757:60773): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014867.759:60774): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257274 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014867.794:60775): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014867.794:60776): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014867.829:60777): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014867.829:60778): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014867.831:60779): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257291 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014867.867:60780): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014867.867:60781): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014867.884:60782): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014867.884:60783): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014867.885:60784): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257307 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014867.921:60785): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014867.922:60786): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014867.968:60787): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014867.968:60788): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014867.969:60789): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257329 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014868.017:60790): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014868.017:60791): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014868.030:60792): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014868.030:60793): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014868.032:60794): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257345 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014868.063:60795): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014868.063:60796): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014868.074:60797): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014868.074:60798): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014868.075:60799): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257362 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014868.315:60800): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014868.315:60801): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1765014868.480:60802): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014868.576:60803): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765014868.758:60804): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014868.758:60805): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014868.759:60806): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257401 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014868.799:60807): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014868.799:60808): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014868.818:60809): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014868.818:60810): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014868.820:60811): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257417 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014868.852:60812): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014868.852:60813): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014868.888:60814): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014868.888:60815): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014868.890:60816): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257434 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014868.939:60817): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014868.940:60818): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014868.952:60819): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014868.952:60820): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014868.954:60821): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257450 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014868.986:60822): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014868.986:60823): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014868.998:60824): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014868.998:60825): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014869.000:60826): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257467 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014869.263:60827): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014869.263:60828): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014869.284:60829): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014869.285:60830): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014869.286:60831): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257487 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014869.315:60832): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014869.315:60833): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014870.620:60834): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014870.620:60835): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014870.621:60836): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257504 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014870.651:60837): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014870.651:60838): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014870.662:60839): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014870.662:60840): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014870.664:60841): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257520 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014870.700:60842): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014870.701:60843): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014870.737:60844): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014870.738:60845): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014870.739:60846): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257542 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014870.797:60847): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014870.797:60848): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014870.817:60849): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014870.817:60850): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014870.819:60851): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257558 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014870.849:60852): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014870.849:60853): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014870.867:60854): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014870.867:60855): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014870.868:60856): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257575 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014871.106:60857): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014871.107:60858): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014871.158:60859): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014871.158:60860): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014871.159:60861): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257595 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014871.197:60862): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014871.198:60863): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014871.214:60864): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014871.215:60865): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014871.218:60866): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257611 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014871.251:60867): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014871.252:60868): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014871.276:60869): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014871.276:60870): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014871.278:60871): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257628 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014871.325:60872): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014871.325:60873): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014871.340:60874): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014871.340:60875): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014871.341:60876): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257644 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014871.374:60877): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014871.374:60878): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014871.387:60879): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014871.388:60880): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014871.389:60881): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257661 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014871.638:60882): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014871.639:60883): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014871.663:60884): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014871.663:60885): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014871.664:60886): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257681 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014871.694:60887): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014871.694:60888): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014871.854:60889): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014871.854:60890): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014871.855:60891): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257698 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014871.881:60892): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014871.882:60893): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014871.895:60894): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014871.895:60895): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014871.897:60896): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257714 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014871.933:60897): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014871.933:60898): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014871.966:60899): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014871.966:60900): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014871.967:60901): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257736 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014872.019:60902): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014872.019:60903): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014872.034:60904): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014872.034:60905): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014872.035:60906): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257752 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014872.068:60907): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014872.068:60908): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014872.082:60909): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014872.083:60910): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014872.084:60911): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257769 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014872.317:60912): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014872.317:60913): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014872.340:60914): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014872.340:60915): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014872.342:60916): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257789 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014872.378:60917): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014872.378:60918): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014872.398:60919): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014872.398:60920): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014872.400:60921): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257805 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014872.428:60922): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014872.428:60923): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014872.457:60924): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014872.457:60925): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014872.458:60926): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257822 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014872.515:60927): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014872.515:60928): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014872.528:60929): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014872.529:60930): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014872.530:60931): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257838 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014872.562:60932): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014872.563:60933): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014872.588:60934): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014872.588:60935): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014872.590:60936): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257855 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014872.838:60937): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014872.838:60938): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014872.857:60939): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014872.857:60940): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014872.858:60941): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257875 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014872.897:60942): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014872.897:60943): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014873.133:60944): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014873.133:60945): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014873.134:60946): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257892 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014873.165:60947): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014873.165:60948): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014873.176:60949): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014873.177:60950): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014873.178:60951): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257908 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014873.219:60952): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014873.219:60953): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014873.243:60954): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014873.243:60955): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014873.250:60956): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014873.250:60957): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014873.252:60958): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257935 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014873.303:60959): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014873.304:60960): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765014873.308:60961): pid=257930 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014873.308:60962): pid=257930 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014873.309:60963): pid=257930 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014873.312:60964): pid=257930 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014873.314:60965): pid=257930 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014873.314:60966): pid=257930 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014873.318:60967): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014873.318:60968): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014873.321:60969): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014873.321:60970): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014873.322:60971): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257964 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_LOGIN msg=audit(1765014873.323:60972): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014873.324:60973): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765014873.357:60974): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014873.357:60975): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014873.372:60976): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014873.372:60977): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014873.374:60978): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=257998 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014873.377:60979): pid=257965 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014873.377:60980): pid=257965 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014873.378:60981): pid=257965 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014873.380:60982): pid=257965 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014873.619:60983): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014873.619:60984): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014873.644:60985): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014873.644:60986): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014873.646:60987): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258019 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014873.688:60988): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014873.688:60989): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014873.701:60990): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014873.701:60991): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014873.702:60992): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258048 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014873.740:60993): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014873.740:60994): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014873.761:60995): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014873.761:60996): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014873.763:60997): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258067 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014873.821:60998): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014873.821:60999): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014873.838:61000): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014873.838:61001): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014873.839:61002): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258086 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014873.871:61003): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014873.871:61004): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014873.887:61005): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014873.887:61006): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014873.889:61007): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258105 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014873.982:61008): pid=257965 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014873.982:61009): pid=257965 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014874.071:61010): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014874.071:61011): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765014874.134:61012): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014874.134:61013): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014874.153:61014): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014874.153:61015): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014874.154:61016): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258137 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014874.183:61017): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014874.184:61018): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014874.448:61019): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014874.448:61020): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014874.449:61021): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258154 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=SERVICE_START msg=audit(1765014874.477:61022): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014874.481:61023): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014874.488:61024): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014874.488:61025): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014874.504:61026): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014874.504:61027): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014874.506:61028): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258186 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014874.547:61029): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014874.547:61030): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014874.576:61031): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014874.576:61032): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014874.577:61033): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258220 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014874.635:61034): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014874.636:61035): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_STOP msg=audit(1765014874.640:61036): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765014874.651:61037): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014874.651:61038): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014874.653:61039): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258250 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=SERVICE_STOP msg=audit(1765014874.678:61040): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014874.691:61041): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014874.691:61042): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014874.707:61043): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014874.707:61044): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014874.709:61045): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258267 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_LOGIN msg=audit(1765014874.720:61046): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014874.720:61047): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014874.786:61048): pid=258274 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014874.786:61049): pid=258274 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014874.788:61050): pid=258274 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014874.792:61051): pid=258274 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014874.795:61052): pid=258274 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014874.796:61053): pid=258274 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014874.800:61054): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014874.801:61055): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765014874.969:61056): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014874.969:61057): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014875.015:61058): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014875.015:61059): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014875.016:61060): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258307 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014875.080:61061): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014875.080:61062): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014875.103:61063): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014875.103:61064): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014875.103:61065): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258323 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014875.135:61066): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014875.135:61067): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014875.167:61068): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014875.167:61069): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014875.168:61070): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258340 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014875.401:61071): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014875.401:61072): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014875.423:61073): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014875.423:61074): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014875.425:61075): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258360 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014875.455:61076): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014875.455:61077): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014875.514:61078): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014875.515:61079): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014875.516:61080): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258377 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014875.545:61081): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014875.545:61082): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014875.569:61083): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014875.569:61084): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014875.570:61085): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258393 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014875.605:61086): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014875.605:61087): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014875.653:61088): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014875.653:61089): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014875.655:61090): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258415 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014875.716:61091): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014875.716:61092): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014875.733:61093): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014875.733:61094): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014875.735:61095): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258431 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014875.768:61096): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014875.768:61097): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014875.784:61098): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014875.784:61099): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014875.786:61100): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258448 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014876.027:61101): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014876.027:61102): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014876.063:61103): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014876.063:61104): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014876.064:61105): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258468 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014876.100:61106): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014876.100:61107): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014876.123:61108): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014876.123:61109): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014876.124:61110): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258484 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014876.157:61111): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014876.157:61112): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014876.194:61113): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014876.194:61114): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014876.195:61115): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258501 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014876.251:61116): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014876.251:61117): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014876.281:61118): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014876.281:61119): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014876.282:61120): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258517 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014876.321:61121): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014876.321:61122): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014876.336:61123): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014876.336:61124): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014876.338:61125): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258534 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=SERVICE_START msg=audit(1765014876.478:61126): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014876.588:61127): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014876.588:61128): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_STOP msg=audit(1765014876.605:61129): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765014876.639:61130): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014876.639:61131): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014876.640:61132): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258573 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014876.674:61133): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014876.674:61134): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014876.827:61135): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014876.827:61136): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014876.829:61137): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258590 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014876.863:61138): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014876.863:61139): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014876.876:61140): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014876.876:61141): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014876.878:61142): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258606 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014876.917:61143): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014876.917:61144): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014876.939:61145): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014876.939:61146): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014876.941:61147): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258628 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014876.998:61148): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014876.998:61149): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014877.011:61150): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014877.011:61151): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014877.012:61152): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258644 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014877.047:61153): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014877.047:61154): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014877.067:61155): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014877.067:61156): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014877.068:61157): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258661 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014877.340:61158): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014877.340:61159): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014877.364:61160): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014877.365:61161): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014877.366:61162): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258683 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014877.399:61163): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014877.399:61164): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014877.685:61165): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014877.685:61166): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014877.686:61167): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258700 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014877.720:61168): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014877.720:61169): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014877.737:61170): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014877.737:61171): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014877.738:61172): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258716 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014877.779:61173): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014877.779:61174): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014877.810:61175): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014877.810:61176): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014877.811:61177): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258738 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014877.872:61178): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014877.872:61179): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014877.898:61180): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014877.898:61181): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014877.900:61182): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258754 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014877.933:61183): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014877.933:61184): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014877.950:61185): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014877.950:61186): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014877.951:61187): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258771 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014878.019:61188): pid=258790 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014878.020:61189): pid=258790 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63726D78797778666B786F786F706B6D766A646E767A6A6F79716A626B727672203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343837372E373234303831352D3733372D323132353432323539393933342F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014878.021:61190): pid=258790 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014878.025:61191): pid=258790 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014878.249:61192): pid=258790 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014878.249:61193): pid=258790 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014878.252:61194): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014878.253:61195): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014878.401:61196): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014878.401:61197): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014878.403:61198): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258793 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014878.439:61199): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014878.439:61200): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014878.500:61201): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014878.500:61202): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014878.501:61203): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258810 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014878.532:61204): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014878.532:61205): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014878.544:61206): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014878.544:61207): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014878.545:61208): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258826 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014878.585:61209): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014878.585:61210): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014878.624:61211): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014878.624:61212): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014878.626:61213): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258848 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014878.685:61214): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014878.686:61215): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014878.702:61216): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014878.702:61217): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014878.704:61218): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258864 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014878.738:61219): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014878.738:61220): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014878.763:61221): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014878.763:61222): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014878.765:61223): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258881 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014878.834:61224): pid=258900 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014878.834:61225): pid=258900 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69617369746C666D6C71656777626F616971786169747366767A696872696376203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343837382E3533333833332D3736302D32333437363837393033363537312F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014878.836:61226): pid=258900 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014878.839:61227): pid=258900 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014879.079:61228): pid=258900 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014879.079:61229): pid=258900 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014879.084:61230): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014879.084:61231): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014879.110:61232): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014879.110:61233): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014879.111:61234): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258905 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014879.168:61235): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014879.169:61236): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014879.184:61237): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014879.184:61238): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014879.185:61239): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258921 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014879.223:61240): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014879.223:61241): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014879.238:61242): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014879.238:61243): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014879.239:61244): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258938 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014879.310:61245): pid=258957 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014879.311:61246): pid=258957 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7867776B7761777A696B61687772656E65716A766B7469656877776570776563203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343837382E3533333833332D3736302D32333437363837393033363537312F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014879.311:61247): pid=258957 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014879.313:61248): pid=258957 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014879.565:61249): pid=258957 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014879.566:61250): pid=258957 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014879.570:61251): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014879.570:61252): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014879.591:61253): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014879.591:61254): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014879.593:61255): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258960 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014879.627:61256): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014879.628:61257): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014879.677:61258): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014879.677:61259): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014879.679:61260): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258977 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014879.708:61261): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014879.708:61262): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014879.728:61263): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014879.728:61264): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014879.729:61265): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=258993 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014879.765:61266): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014879.765:61267): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014879.792:61268): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014879.793:61269): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014879.794:61270): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259015 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014879.846:61271): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014879.846:61272): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014879.858:61273): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014879.859:61274): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014879.860:61275): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259031 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014879.888:61276): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014879.888:61277): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014879.912:61278): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014879.912:61279): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014879.913:61280): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259048 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014879.976:61281): pid=259067 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014879.976:61282): pid=259067 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68677A77797473726C697364756F68706C69676A686767696178797A6E7A6478203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343837392E373132323839362D3736302D38373737323135383337383735312F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014879.977:61283): pid=259067 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014879.980:61284): pid=259067 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014880.202:61285): pid=259067 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014880.202:61286): pid=259067 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014880.206:61287): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014880.206:61288): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014880.231:61289): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014880.231:61290): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014880.232:61291): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259072 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014880.286:61292): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014880.286:61293): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014880.299:61294): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014880.299:61295): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014880.301:61296): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259088 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014880.334:61297): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014880.334:61298): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014880.350:61299): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014880.350:61300): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014880.352:61301): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259105 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014880.401:61302): pid=259124 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014880.401:61303): pid=259124 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746877686469796C666A657968776F78646A7669756C6D7574646C676F677463203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343837392E373132323839362D3736302D38373737323135383337383735312F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014880.403:61304): pid=259124 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014880.405:61305): pid=259124 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014880.592:61306): pid=259124 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014880.593:61307): pid=259124 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014880.597:61308): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014880.597:61309): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014880.618:61310): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014880.618:61311): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014880.620:61312): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259127 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014880.649:61313): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014880.649:61314): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014880.923:61315): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014880.923:61316): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014880.924:61317): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259144 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014880.960:61318): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014880.960:61319): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014880.974:61320): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014880.974:61321): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014880.975:61322): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259160 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014881.015:61323): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014881.015:61324): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014881.057:61325): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014881.057:61326): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014881.081:61327): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259182 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014881.149:61328): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014881.149:61329): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014881.174:61330): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014881.174:61331): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014881.175:61332): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259198 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014881.206:61333): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014881.206:61334): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014881.260:61335): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014881.260:61336): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014881.261:61337): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259215 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014881.331:61338): pid=259234 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014881.332:61339): pid=259234 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776D79706A7076756A76616A776572657466766B666677636E6964726E6F7169203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343838302E393634303631332D3833302D34383339303331333438373632352F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014881.332:61340): pid=259234 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014881.335:61341): pid=259234 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014881.563:61342): pid=259234 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014881.564:61343): pid=259234 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014881.566:61344): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014881.567:61345): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014881.593:61346): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014881.593:61347): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014881.594:61348): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259237 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014881.632:61349): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014881.633:61350): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014881.715:61351): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014881.716:61352): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014881.717:61353): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259254 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014881.756:61354): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014881.756:61355): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014881.769:61356): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014881.769:61357): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014881.770:61358): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259270 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014881.809:61359): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014881.810:61360): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014881.837:61361): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014881.837:61362): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014881.839:61363): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259292 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014881.890:61364): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014881.890:61365): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014881.900:61366): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014881.900:61367): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014881.902:61368): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259308 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014881.937:61369): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014881.938:61370): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014881.951:61371): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014881.951:61372): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014881.953:61373): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259325 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014882.022:61374): pid=259344 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014882.022:61375): pid=259344 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63737077766D736167757970636B7867786562736E697173796B796E6B756C71203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343838312E373538313231372D3835342D3136313532303938393936383135382F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014882.022:61376): pid=259344 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014882.032:61377): pid=259344 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1765014882.034:61378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014882.153:61379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014882.238:61380): pid=259368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259368 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_END msg=audit(1765014882.265:61381): pid=259344 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014882.265:61382): pid=259344 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014882.269:61383): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014882.269:61384): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014882.304:61385): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014882.304:61386): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014882.306:61387): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259370 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014882.364:61388): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014882.364:61389): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014882.396:61390): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014882.397:61391): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014882.398:61392): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259386 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014882.436:61393): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014882.436:61394): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014882.460:61395): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014882.460:61396): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014882.462:61397): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259403 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=CRYPTO_SESSION msg=audit(1765014882.473:61398): pid=259366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=259368 suid=74 rport=52712 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765014882.473:61399): pid=259366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=259368 suid=74 rport=52712 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ACCT msg=audit(1765014882.533:61400): pid=259422 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014882.534:61401): pid=259422 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7871756B696962636A666579716F65667869796673646D69756869707A6D7176203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343838312E373538313231372D3835342D3136313532303938393936383135382F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014882.534:61402): pid=259422 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014882.538:61403): pid=259422 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014882.771:61404): pid=259422 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014882.771:61405): pid=259422 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014882.775:61406): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014882.776:61407): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014882.796:61408): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014882.796:61409): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014882.798:61410): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259425 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014882.836:61411): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014882.836:61412): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014883.017:61413): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014883.018:61414): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014883.019:61415): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259442 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014883.044:61416): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014883.045:61417): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014883.064:61418): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014883.065:61419): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014883.066:61420): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259458 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014883.103:61421): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014883.103:61422): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014883.150:61423): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014883.151:61424): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014883.152:61425): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259480 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014883.217:61426): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014883.217:61427): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014883.236:61428): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014883.236:61429): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014883.238:61430): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259496 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014883.273:61431): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014883.274:61432): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014883.289:61433): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014883.289:61434): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014883.291:61435): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259513 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014883.352:61436): pid=259532 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014883.352:61437): pid=259532 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A73656E6A6D7772796C6C696B697A757A6973696373686776657277757A6364203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343838332E303436373831382D3839302D37363234303737393338313730392F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014883.353:61438): pid=259532 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014883.369:61439): pid=259532 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1765014883.371:61440): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014883.509:61441): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014883.607:61442): pid=259532 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014883.608:61443): pid=259532 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014883.612:61444): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014883.612:61445): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014883.654:61446): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014883.654:61447): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014883.655:61448): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259560 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014883.711:61449): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014883.711:61450): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014883.723:61451): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014883.723:61452): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014883.724:61453): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259576 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014883.763:61454): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014883.763:61455): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014883.780:61456): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014883.780:61457): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014883.782:61458): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259593 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014883.850:61459): pid=259612 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014883.850:61460): pid=259612 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65617078646B6B75636373716F7462636F73747267796A646262616A72757961203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343838332E303436373831382D3839302D37363234303737393338313730392F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014883.850:61461): pid=259612 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014883.853:61462): pid=259612 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014884.074:61463): pid=259612 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014884.074:61464): pid=259612 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014884.079:61465): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014884.079:61466): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014884.096:61467): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014884.096:61468): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014884.097:61469): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259615 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014884.129:61470): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014884.130:61471): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014884.205:61472): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014884.205:61473): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014884.206:61474): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259632 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014884.240:61475): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014884.240:61476): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014884.257:61477): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014884.257:61478): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014884.259:61479): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259648 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014884.302:61480): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014884.302:61481): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014884.343:61482): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014884.343:61483): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014884.345:61484): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259670 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014884.439:61485): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014884.439:61486): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014884.461:61487): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014884.461:61488): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014884.463:61489): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259686 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014884.501:61490): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014884.502:61491): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014884.521:61492): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014884.522:61493): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014884.523:61494): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259703 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014884.588:61495): pid=259722 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014884.589:61496): pid=259722 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77776C727364626F7369756972766C70786376766B756C7978786D616B7A6173203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343838342E323431393538362D3932352D3138303130353133313636363436352F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014884.589:61497): pid=259722 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014884.591:61498): pid=259722 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=BPF msg=audit(1765014885.258:61499): prog-id=1960 op=LOAD
type=BPF msg=audit(1765014885.258:61500): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014885.262:61501): prog-id=1961 op=LOAD
type=BPF msg=audit(1765014885.262:61502): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014885.266:61503): prog-id=1962 op=LOAD
type=BPF msg=audit(1765014885.266:61504): prog-id=1963 op=LOAD
type=BPF msg=audit(1765014885.266:61505): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014885.266:61506): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014885.267:61507): prog-id=1964 op=LOAD
type=BPF msg=audit(1765014885.267:61508): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014885.268:61509): prog-id=1965 op=LOAD
type=BPF msg=audit(1765014885.268:61510): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014885.268:61511): prog-id=1966 op=LOAD
type=BPF msg=audit(1765014885.268:61512): prog-id=1967 op=LOAD
type=BPF msg=audit(1765014885.268:61513): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014885.268:61514): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014885.270:61515): prog-id=1968 op=LOAD
type=BPF msg=audit(1765014885.270:61516): prog-id=1969 op=LOAD
type=BPF msg=audit(1765014885.270:61517): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014885.270:61518): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014885.271:61519): prog-id=1970 op=LOAD
type=BPF msg=audit(1765014885.271:61520): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014885.271:61521): prog-id=1971 op=LOAD
type=BPF msg=audit(1765014885.271:61522): prog-id=1972 op=LOAD
type=BPF msg=audit(1765014885.271:61523): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014885.271:61524): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765014885.363:61525): pid=259722 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014885.363:61526): pid=259722 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014885.368:61527): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014885.368:61528): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014885.386:61529): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014885.386:61530): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014885.387:61531): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259763 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014885.422:61532): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014885.423:61533): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014885.503:61534): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014885.503:61535): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014885.506:61536): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259780 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014885.541:61537): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014885.542:61538): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014885.574:61539): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014885.574:61540): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014885.576:61541): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259796 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014885.615:61542): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014885.615:61543): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014885.664:61544): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014885.664:61545): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014885.666:61546): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259818 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014885.732:61547): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014885.732:61548): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014885.750:61549): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014885.750:61550): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014885.752:61551): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259834 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014885.788:61552): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014885.788:61553): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014885.804:61554): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014885.804:61555): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014885.806:61556): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259851 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014885.861:61557): pid=259870 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014885.861:61558): pid=259870 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686668706D6F67616E67696F63666674646D6E786F6D69716378716567667572203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343838352E353433363133342D3935302D35333631343638313838323531322F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014885.862:61559): pid=259870 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014885.865:61560): pid=259870 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014886.295:61561): pid=259870 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014886.295:61562): pid=259870 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014886.298:61563): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014886.298:61564): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014886.324:61565): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014886.324:61566): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014886.325:61567): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259875 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014886.372:61568): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014886.372:61569): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014886.385:61570): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014886.386:61571): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014886.387:61572): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259891 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014886.417:61573): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014886.417:61574): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014886.441:61575): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014886.441:61576): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014886.442:61577): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259908 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014886.514:61578): pid=259927 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014886.514:61579): pid=259927 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776F776572776769726274686E6665736D7372706976646B6F6E786479767776203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343838352E353433363133342D3935302D35333631343638313838323531322F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014886.515:61580): pid=259927 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014886.518:61581): pid=259927 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014886.750:61582): pid=259927 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014886.750:61583): pid=259927 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014886.754:61584): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014886.754:61585): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014886.771:61586): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014886.771:61587): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014886.772:61588): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259930 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014886.804:61589): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014886.804:61590): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014886.886:61591): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014886.887:61592): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014886.888:61593): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259947 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014886.912:61594): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014886.913:61595): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014886.925:61596): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014886.925:61597): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014886.927:61598): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259963 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014886.961:61599): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014886.961:61600): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014886.989:61601): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014886.989:61602): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014886.990:61603): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259985 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014887.068:61604): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014887.069:61605): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014887.080:61606): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014887.080:61607): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014887.082:61608): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260001 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014887.107:61609): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014887.107:61610): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014887.117:61611): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014887.117:61612): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014887.119:61613): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260018 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014887.166:61614): pid=260037 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014887.166:61615): pid=260037 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D717761656B67726A73636D657461656C666B73616378636C67796B7566776C6E203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343838362E3931363130382D3938352D39383036363339393239353735372F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014887.166:61616): pid=260037 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014887.168:61617): pid=260037 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014887.245:61618): pid=259366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=259368 suid=74 rport=52712 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765014887.245:61619): pid=259366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259368 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765014887.246:61620): pid=259366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=101.47.160.186 addr=101.47.160.186 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014887.246:61621): pid=259366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=259366 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765014887.246:61622): pid=259366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1765014887.358:61623): pid=260037 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014887.358:61624): pid=260037 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014887.362:61625): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014887.362:61626): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014887.405:61627): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014887.406:61628): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014887.407:61629): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260042 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014887.464:61630): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014887.464:61631): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014887.482:61632): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014887.482:61633): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014887.483:61634): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260058 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014887.518:61635): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014887.518:61636): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014887.533:61637): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014887.534:61638): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014887.535:61639): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260075 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014887.600:61640): pid=260094 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014887.601:61641): pid=260094 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A72716D7671706269757469667773636E6F726F65757963647272786B647063203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343838362E3931363130382D3938352D39383036363339393239353735372F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014887.601:61642): pid=260094 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014887.605:61643): pid=260094 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014887.839:61644): pid=260094 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014887.840:61645): pid=260094 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014887.843:61646): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014887.844:61647): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014887.869:61648): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014887.869:61649): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014887.871:61650): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260097 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014887.894:61651): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014887.894:61652): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014888.103:61653): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014888.103:61654): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014888.105:61655): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260114 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014888.133:61656): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014888.133:61657): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014888.145:61658): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014888.145:61659): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014888.146:61660): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260130 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014888.178:61661): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014888.178:61662): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014888.205:61663): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014888.205:61664): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014888.206:61665): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260152 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014888.266:61666): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014888.267:61667): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014888.297:61668): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014888.297:61669): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014888.299:61670): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260168 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014888.329:61671): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014888.330:61672): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014888.343:61673): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014888.343:61674): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014888.345:61675): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260185 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014888.411:61676): pid=260204 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014888.412:61677): pid=260204 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76786B6D71657676627669657073636E616D77656F7473776864656977617677203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343838382E313334363437362D313032312D3138313133343435393331333238352F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014888.412:61678): pid=260204 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014888.417:61679): pid=260204 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1765014888.764:61680): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765014889.089:61681): prog-id=1973 op=LOAD
type=BPF msg=audit(1765014889.090:61682): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014889.093:61683): prog-id=1974 op=LOAD
type=BPF msg=audit(1765014889.093:61684): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014889.097:61685): prog-id=1975 op=LOAD
type=BPF msg=audit(1765014889.097:61686): prog-id=1976 op=LOAD
type=BPF msg=audit(1765014889.097:61687): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014889.097:61688): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014889.098:61689): prog-id=1977 op=LOAD
type=BPF msg=audit(1765014889.098:61690): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014889.099:61691): prog-id=1978 op=LOAD
type=BPF msg=audit(1765014889.099:61692): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014889.099:61693): prog-id=1979 op=LOAD
type=BPF msg=audit(1765014889.099:61694): prog-id=1980 op=LOAD
type=BPF msg=audit(1765014889.099:61695): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014889.099:61696): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014889.101:61697): prog-id=1981 op=LOAD
type=BPF msg=audit(1765014889.101:61698): prog-id=1982 op=LOAD
type=BPF msg=audit(1765014889.101:61699): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014889.101:61700): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014889.102:61701): prog-id=1983 op=LOAD
type=BPF msg=audit(1765014889.102:61702): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014889.102:61703): prog-id=1984 op=LOAD
type=BPF msg=audit(1765014889.102:61704): prog-id=1985 op=LOAD
type=BPF msg=audit(1765014889.102:61705): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014889.102:61706): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1765014889.112:61707): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014889.207:61708): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014889.207:61709): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014889.237:61710): pid=260204 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014889.238:61711): pid=260204 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014889.242:61712): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014889.242:61713): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014889.263:61714): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014889.264:61715): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014889.265:61716): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260274 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014889.291:61717): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014889.291:61718): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014889.793:61719): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014889.793:61720): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014889.794:61721): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260291 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014889.822:61722): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014889.822:61723): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014889.833:61724): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014889.833:61725): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014889.834:61726): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260307 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014889.870:61727): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014889.870:61728): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014889.894:61729): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014889.894:61730): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014889.896:61731): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260329 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014889.947:61732): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014889.947:61733): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014889.959:61734): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014889.959:61735): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014889.961:61736): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260345 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014889.993:61737): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014889.993:61738): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014890.008:61739): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014890.008:61740): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014890.010:61741): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260362 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014890.083:61742): pid=260381 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014890.084:61743): pid=260381 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D74636669796476626E61626E78636364786B71796E757063716A6B77757377203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343838392E383234363839342D313035322D3136363832363530393934333036322F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014890.085:61744): pid=260381 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014890.092:61745): pid=260381 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014890.334:61746): pid=260381 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014890.334:61747): pid=260381 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014890.338:61748): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014890.339:61749): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014890.357:61750): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014890.357:61751): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014890.358:61752): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260384 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014890.391:61753): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014890.391:61754): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014890.527:61755): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014890.527:61756): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014890.529:61757): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260401 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014890.561:61758): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014890.562:61759): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014890.581:61760): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014890.581:61761): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014890.582:61762): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260417 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014890.623:61763): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014890.623:61764): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014890.651:61765): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014890.651:61766): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014890.653:61767): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260439 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014890.700:61768): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014890.701:61769): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014890.710:61770): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014890.711:61771): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014890.712:61772): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260455 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014890.741:61773): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014890.742:61774): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014890.757:61775): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014890.758:61776): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014890.759:61777): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260472 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014890.827:61778): pid=260491 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014890.827:61779): pid=260491 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6862687079766E686B64766765677A6A7A627571747068786B6273766A727A67203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343839302E353633373337322D313037352D34373037303334343336333932352F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014890.827:61780): pid=260491 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014890.830:61781): pid=260491 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014891.048:61782): pid=260491 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014891.049:61783): pid=260491 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014891.053:61784): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014891.053:61785): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014891.077:61786): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014891.077:61787): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014891.079:61788): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260494 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014891.118:61789): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014891.118:61790): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014891.130:61791): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014891.130:61792): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014891.158:61793): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260510 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014891.188:61794): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014891.188:61795): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014891.212:61796): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014891.212:61797): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014891.214:61798): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260527 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014891.259:61799): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014891.259:61800): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014891.279:61801): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014891.279:61802): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014891.280:61803): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260543 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014891.312:61804): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014891.312:61805): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014891.323:61806): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014891.323:61807): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014891.325:61808): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260560 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014891.391:61809): pid=260579 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014891.392:61810): pid=260579 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B767461757A6A6D7674686C6B796B7A63696B6876616D6F716A6C736D6E677A203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343839302E353633373337322D313037352D34373037303334343336333932352F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014891.392:61811): pid=260579 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014891.395:61812): pid=260579 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014891.613:61813): pid=260579 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014891.614:61814): pid=260579 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014891.617:61815): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014891.617:61816): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014891.632:61817): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014891.632:61818): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014891.634:61819): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260582 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014891.666:61820): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014891.666:61821): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014891.802:61822): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014891.802:61823): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014891.803:61824): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260599 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014891.837:61825): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014891.837:61826): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014891.849:61827): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014891.849:61828): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014891.851:61829): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260615 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014891.885:61830): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014891.885:61831): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014891.913:61832): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014891.913:61833): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014891.914:61834): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260637 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014891.963:61835): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014891.963:61836): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014891.987:61837): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014891.987:61838): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014891.988:61839): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260653 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014892.014:61840): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014892.014:61841): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014892.031:61842): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014892.032:61843): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014892.032:61844): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260670 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014892.085:61845): pid=260689 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014892.085:61846): pid=260689 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61756D78666863756C786C697770777163626F776569616864767A78696A7868203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343839312E383338353537372D313132302D3231323338333932353339303135392F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014892.086:61847): pid=260689 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014892.088:61848): pid=260689 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014892.286:61849): pid=260689 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014892.286:61850): pid=260689 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014892.326:61851): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014892.326:61852): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014892.326:61853): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014892.326:61854): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014892.328:61855): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260692 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014892.361:61856): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014892.361:61857): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014892.571:61858): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014892.571:61859): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014892.572:61860): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260709 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014892.606:61861): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014892.606:61862): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014892.623:61863): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014892.623:61864): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014892.625:61865): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260725 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014892.663:61866): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014892.663:61867): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014892.689:61868): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014892.690:61869): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014892.691:61870): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260747 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014892.741:61871): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014892.741:61872): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014892.768:61873): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014892.768:61874): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014892.770:61875): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260763 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014892.802:61876): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014892.802:61877): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014892.821:61878): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014892.821:61879): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014892.822:61880): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260780 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014892.886:61881): pid=260799 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014892.886:61882): pid=260799 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746A6F62616C78617266756B6D637A667872666F727264646267686E77746861203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343839322E3630383034312D313134342D3233333236333834353038313331382F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014892.887:61883): pid=260799 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014892.890:61884): pid=260799 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014893.098:61885): pid=260799 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014893.098:61886): pid=260799 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014893.101:61887): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014893.102:61888): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014893.124:61889): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014893.125:61890): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014893.126:61891): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260802 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014893.164:61892): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014893.164:61893): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014893.177:61894): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014893.177:61895): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014893.178:61896): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260818 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014893.209:61897): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014893.210:61898): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014893.233:61899): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014893.233:61900): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014893.234:61901): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260835 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014893.286:61902): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014893.287:61903): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014893.303:61904): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014893.303:61905): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014893.304:61906): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260851 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014893.336:61907): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014893.337:61908): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014893.356:61909): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014893.356:61910): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014893.358:61911): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260868 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014893.423:61912): pid=260887 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014893.423:61913): pid=260887 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65726A787863707A687171617869736E6F786A7A6E6C766467636F766B73636A203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343839322E3630383034312D313134342D3233333236333834353038313331382F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014893.424:61914): pid=260887 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014893.427:61915): pid=260887 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014893.665:61916): pid=260887 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014893.665:61917): pid=260887 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014893.669:61918): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014893.669:61919): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014893.681:61920): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014893.682:61921): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014893.683:61922): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260890 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014893.709:61923): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014893.709:61924): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014894.287:61925): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014894.287:61926): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014894.289:61927): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260907 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014894.321:61928): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014894.321:61929): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014894.337:61930): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014894.337:61931): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014894.339:61932): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260923 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014894.375:61933): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014894.375:61934): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014894.459:61935): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014894.459:61936): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014894.461:61937): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260945 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014894.513:61938): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014894.513:61939): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014894.533:61940): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014894.533:61941): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014894.534:61942): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260961 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014894.571:61943): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014894.571:61944): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014894.590:61945): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014894.590:61946): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014894.592:61947): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=260978 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014894.659:61948): pid=260997 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014894.659:61949): pid=260997 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B786D697A677672667172746B71636B6F76716272747379656A646F6E6E6C65203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343839342E3332383137312D313139352D3133373535373437353037373137392F416E736962616C6C5A5F636F6E7461696E65725F636F6E6669675F646174612E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014894.660:61950): pid=260997 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014894.663:61951): pid=260997 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014894.907:61952): pid=260997 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014894.907:61953): pid=260997 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014894.911:61954): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014894.911:61955): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014894.930:61956): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014894.930:61957): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014894.931:61958): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261000 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014894.958:61959): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014894.958:61960): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014895.143:61961): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014895.143:61962): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014895.144:61963): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261017 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014895.171:61964): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014895.171:61965): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014895.197:61966): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014895.197:61967): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014895.198:61968): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261033 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014895.224:61969): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014895.224:61970): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014895.388:61971): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014895.388:61972): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014895.389:61973): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261055 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014895.444:61974): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014895.444:61975): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014895.469:61976): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014895.469:61977): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014895.471:61978): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261071 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014895.501:61979): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014895.501:61980): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014895.517:61981): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014895.517:61982): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014895.518:61983): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261088 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014895.581:61984): pid=261107 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014895.581:61985): pid=261107 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706362666F626664696C7172676E6765676170776668676B636B6B6A7A74776C203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343839352E3137373032382D313232322D3236373934343932343336373835382F416E736962616C6C5A5F636F6E7461696E65725F636F6E6669675F686173682E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014895.582:61986): pid=261107 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014895.584:61987): pid=261107 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014895.808:61988): pid=261107 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014895.809:61989): pid=261107 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014895.813:61990): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014895.813:61991): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014895.830:61992): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014895.830:61993): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014895.831:61994): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261110 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014895.862:61995): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014895.862:61996): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014896.209:61997): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014896.209:61998): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014896.210:61999): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261127 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014896.244:62000): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014896.244:62001): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014896.257:62002): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014896.257:62003): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014896.258:62004): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261143 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014896.297:62005): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014896.297:62006): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014896.535:62007): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014896.535:62008): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014896.537:62009): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261165 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014896.595:62010): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014896.596:62011): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014896.616:62012): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014896.616:62013): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014896.618:62014): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261181 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014896.653:62015): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014896.653:62016): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014896.667:62017): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014896.667:62018): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014896.669:62019): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261198 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014896.738:62020): pid=261217 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014896.739:62021): pid=261217 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67666E7A71707A7161646870747369636F72666163756A6F706F727273786271203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343839362E3234373134322D313234392D3133393730333039383632373937342F416E736962616C6C5A5F706F646D616E5F636F6E7461696E65725F696E666F2E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014896.739:62022): pid=261217 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014896.742:62023): pid=261217 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014897.240:62024): pid=261217 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014897.241:62025): pid=261217 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014897.245:62026): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014897.245:62027): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014897.292:62028): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014897.292:62029): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014897.293:62030): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261246 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014897.324:62031): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014897.324:62032): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1765014899.471:62033): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014899.587:62034): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765014900.688:62035): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014900.688:62036): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014900.690:62037): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261281 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014900.723:62038): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014900.723:62039): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014900.736:62040): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014900.736:62041): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014900.737:62042): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261297 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014900.773:62043): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014900.773:62044): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014900.985:62045): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014900.985:62046): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014900.986:62047): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261319 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014901.041:62048): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014901.041:62049): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014901.074:62050): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014901.074:62051): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014901.075:62052): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261335 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014901.101:62053): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014901.101:62054): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014901.122:62055): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014901.122:62056): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014901.123:62057): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261352 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014901.184:62058): pid=261371 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014901.185:62059): pid=261371 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73696263637566616371716F6169686868796170667A7967646A786674747765203B202F7573722F62696E2F707974686F6E33202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343930302E37323439372D313238382D3231323439373930303730353032362F416E736962616C6C5A5F6564706D5F636F6E7461696E65725F6D616E6167652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014901.186:62060): pid=261371 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014901.190:62061): pid=261371 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014901.873:62062): pid=261371 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014901.873:62063): pid=261371 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014901.877:62064): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014901.877:62065): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014901.904:62066): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014901.904:62067): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014901.905:62068): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261449 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014901.938:62069): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014901.938:62070): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014902.246:62071): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014902.246:62072): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014902.247:62073): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261466 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014902.275:62074): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014902.276:62075): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014902.290:62076): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014902.290:62077): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014902.291:62078): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261482 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014902.319:62079): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014902.319:62080): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014902.349:62081): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014902.349:62082): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014902.350:62083): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261504 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014902.413:62084): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014902.413:62085): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014902.429:62086): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014902.430:62087): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014902.431:62088): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261520 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014902.457:62089): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014902.457:62090): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014902.479:62091): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014902.479:62092): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014902.480:62093): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261537 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014902.526:62094): pid=261556 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014902.526:62095): pid=261556 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C66786361696E6C777665766B6F726479636C6A776272776D706E6E77796471203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343930322E323737393434362D313331322D37343439363438323038353837392F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014902.528:62096): pid=261556 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014902.531:62097): pid=261556 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014902.764:62098): pid=261556 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014902.765:62099): pid=261556 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014902.768:62100): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014902.768:62101): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014902.784:62102): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014902.784:62103): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014902.785:62104): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261561 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014902.811:62105): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014902.811:62106): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014903.098:62107): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014903.098:62108): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014903.100:62109): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261578 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014903.132:62110): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014903.132:62111): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014903.152:62112): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014903.152:62113): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014903.153:62114): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261594 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014903.191:62115): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014903.191:62116): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014903.228:62117): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014903.228:62118): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014903.229:62119): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261616 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014903.280:62120): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014903.280:62121): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014903.296:62122): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014903.296:62123): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014903.298:62124): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261632 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014903.331:62125): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014903.331:62126): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014903.352:62127): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014903.352:62128): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014903.353:62129): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261649 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014903.424:62130): pid=261668 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014903.424:62131): pid=261668 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D717971796F697A7375636B62637072687766796A696979656878646A6C72726C203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343930332E313334373335332D313333392D38333334343736323039323536332F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014903.425:62132): pid=261668 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014903.428:62133): pid=261668 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014903.664:62134): pid=261668 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014903.664:62135): pid=261668 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014903.668:62136): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014903.668:62137): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014903.695:62138): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014903.695:62139): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014903.697:62140): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261671 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014903.749:62141): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014903.749:62142): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014903.770:62143): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014903.770:62144): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014903.772:62145): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261687 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014903.800:62146): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014903.800:62147): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014903.813:62148): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014903.813:62149): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014903.814:62150): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261704 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014903.877:62151): pid=261723 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014903.877:62152): pid=261723 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696E626172707765667A6D77686461666474707768736E656862696B78687565203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343930332E313334373335332D313333392D38333334343736323039323536332F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014903.878:62153): pid=261723 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014903.880:62154): pid=261723 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014904.076:62155): pid=261723 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014904.076:62156): pid=261723 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014904.080:62157): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014904.080:62158): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014904.094:62159): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014904.094:62160): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014904.096:62161): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261726 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014904.121:62162): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014904.121:62163): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014904.134:62164): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014904.134:62165): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014904.135:62166): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261742 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014904.170:62167): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014904.170:62168): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014904.286:62169): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014904.286:62170): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014904.288:62171): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261764 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014904.328:62172): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014904.329:62173): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014904.353:62174): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014904.353:62175): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014904.355:62176): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261780 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014904.420:62177): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014904.420:62178): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014904.441:62179): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014904.441:62180): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014904.442:62181): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261796 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014904.479:62182): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014904.479:62183): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014904.499:62184): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014904.499:62185): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014904.501:62186): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261813 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014904.563:62187): pid=261832 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014904.563:62188): pid=261832 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756F667077757277676665787276766666656E777279626A6E7766666E6F6464203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343930342E313233303532362D313333392D3135333133323833323433373036372F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014904.564:62189): pid=261832 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014904.567:62190): pid=261832 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014904.783:62191): pid=261832 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014904.784:62192): pid=261832 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014904.787:62193): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014904.787:62194): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014904.827:62195): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014904.827:62196): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014904.828:62197): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261835 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014904.908:62198): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014904.908:62199): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014904.927:62200): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014904.927:62201): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014904.929:62202): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261851 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014904.960:62203): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014904.960:62204): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014904.980:62205): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014904.980:62206): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014904.981:62207): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261868 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014905.038:62208): pid=261887 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014905.038:62209): pid=261887 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636F6C726B636D6F6E736F76777673616468686272766668776C6A6F6E6A736D203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343930342E313233303532362D313333392D3135333133323833323433373036372F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014905.039:62210): pid=261887 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014905.052:62211): pid=261887 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1765014905.054:62212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014905.057:62213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014905.178:62214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014905.274:62215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765014905.702:62216): prog-id=1986 op=LOAD
type=BPF msg=audit(1765014905.702:62217): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014905.706:62218): prog-id=1987 op=LOAD
type=BPF msg=audit(1765014905.706:62219): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014905.709:62220): prog-id=1988 op=LOAD
type=BPF msg=audit(1765014905.709:62221): prog-id=1989 op=LOAD
type=BPF msg=audit(1765014905.709:62222): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014905.709:62223): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014905.710:62224): prog-id=1990 op=LOAD
type=BPF msg=audit(1765014905.710:62225): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014905.711:62226): prog-id=1991 op=LOAD
type=BPF msg=audit(1765014905.711:62227): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014905.711:62228): prog-id=1992 op=LOAD
type=BPF msg=audit(1765014905.711:62229): prog-id=1993 op=LOAD
type=BPF msg=audit(1765014905.711:62230): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014905.711:62231): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014905.712:62232): prog-id=1994 op=LOAD
type=BPF msg=audit(1765014905.712:62233): prog-id=1995 op=LOAD
type=BPF msg=audit(1765014905.712:62234): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014905.712:62235): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014905.713:62236): prog-id=1996 op=LOAD
type=BPF msg=audit(1765014905.713:62237): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014905.713:62238): prog-id=1997 op=LOAD
type=BPF msg=audit(1765014905.713:62239): prog-id=1998 op=LOAD
type=BPF msg=audit(1765014905.714:62240): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014905.714:62241): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765014905.747:62242): pid=261887 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014905.747:62243): pid=261887 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014905.753:62244): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014905.753:62245): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014905.854:62246): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014905.854:62247): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014905.856:62248): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261968 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014905.932:62249): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014905.932:62250): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014905.950:62251): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014905.950:62252): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014905.951:62253): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=261984 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014905.987:62254): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014905.987:62255): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014906.004:62256): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014906.004:62257): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014906.006:62258): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=262001 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014906.067:62259): pid=262020 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014906.068:62260): pid=262020 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79766E76716F74736361706F6E6A686E6C6671727A68697A6970727175627867203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343930342E313233303532362D313333392D3135333133323833323433373036372F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014906.070:62261): pid=262020 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014906.074:62262): pid=262020 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=BPF msg=audit(1765014906.802:62263): prog-id=1999 op=LOAD
type=BPF msg=audit(1765014906.802:62264): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014906.806:62265): prog-id=2000 op=LOAD
type=BPF msg=audit(1765014906.806:62266): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014906.810:62267): prog-id=2001 op=LOAD
type=BPF msg=audit(1765014906.810:62268): prog-id=2002 op=LOAD
type=BPF msg=audit(1765014906.810:62269): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014906.810:62270): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014906.810:62271): prog-id=2003 op=LOAD
type=BPF msg=audit(1765014906.810:62272): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014906.811:62273): prog-id=2004 op=LOAD
type=BPF msg=audit(1765014906.811:62274): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014906.811:62275): prog-id=2005 op=LOAD
type=BPF msg=audit(1765014906.811:62276): prog-id=2006 op=LOAD
type=BPF msg=audit(1765014906.811:62277): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014906.811:62278): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014906.813:62279): prog-id=2007 op=LOAD
type=BPF msg=audit(1765014906.813:62280): prog-id=2008 op=LOAD
type=BPF msg=audit(1765014906.813:62281): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014906.813:62282): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014906.814:62283): prog-id=2009 op=LOAD
type=BPF msg=audit(1765014906.814:62284): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014906.814:62285): prog-id=2010 op=LOAD
type=BPF msg=audit(1765014906.814:62286): prog-id=2011 op=LOAD
type=BPF msg=audit(1765014906.814:62287): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014906.814:62288): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765014906.827:62289): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765014906.953:62290): prog-id=2012 op=LOAD
type=SYSCALL msg=audit(1765014906.953:62290): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffeee906fc0 a2=90 a3=9500000001 items=0 ppid=262091 pid=262092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765014906.953:62290): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F616666363564333835386231353131343731393962393761303332623138
type=SERVICE_START msg=audit(1765014906.983:62291): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=edpm_neutron_dhcp_agent comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765014906.990:62292): pid=262103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765014906.990:62293): pid=262103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765014906.990:62294): pid=262103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765014906.992:62295): pid=262103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014906.996:62296): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014907.025:62297): pid=262020 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014907.025:62298): pid=262020 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014907.030:62299): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014907.030:62300): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014907.048:62301): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014907.048:62302): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014907.049:62303): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=262106 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014907.058:62304): pid=262103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765014907.058:62305): pid=262103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765014907.076:62306): pid=262115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765014907.077:62307): pid=262115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_copy_cacerts" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765014907.077:62308): pid=262115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014907.078:62309): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014907.078:62310): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014907.078:62311): pid=262115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014907.081:62312): pid=262115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765014907.082:62313): pid=262115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765014908.755:62314): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014908.755:62315): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014908.756:62316): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=262131 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014908.790:62317): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014908.790:62318): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014908.813:62319): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014908.813:62320): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014908.814:62321): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=262147 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014908.853:62322): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014908.853:62323): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014908.887:62324): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014908.887:62325): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014908.888:62326): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=262169 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014908.940:62327): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014908.941:62328): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014908.958:62329): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014908.958:62330): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014908.959:62331): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=262186 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014908.992:62332): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014908.993:62333): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014909.005:62334): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014909.005:62335): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014909.007:62336): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=262203 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014909.079:62337): pid=262239 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014909.079:62338): pid=262239 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74697A7770777062646864657679696475716A6D766C676875796C6877726B6A203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343930382E3739333934312D313432332D3138303337323031383933323336332F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014909.080:62339): pid=262239 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014909.085:62340): pid=262239 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=BPF msg=audit(1765014909.849:62341): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1765014910.035:62342): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=edpm_neutron_dhcp_agent comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765014910.139:62343): prog-id=2013 op=LOAD
type=SYSCALL msg=audit(1765014910.139:62343): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffd7565ccd0 a2=90 a3=9500000001 items=0 ppid=262322 pid=262323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765014910.139:62343): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F616666363564333835386231353131343731393962393761303332623138
type=SERVICE_START msg=audit(1765014910.162:62344): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=edpm_neutron_dhcp_agent comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765014910.173:62345): pid=262328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765014910.174:62346): pid=262328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765014910.174:62347): pid=262328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765014910.176:62348): pid=262328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014910.199:62349): pid=262239 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014910.200:62350): pid=262239 uid=1000 auid=1000 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014910.204:62351): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014910.204:62352): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765014910.216:62353): pid=262328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765014910.216:62354): pid=262328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765014910.227:62355): pid=262332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765014910.227:62356): pid=262332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_copy_cacerts" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765014910.227:62357): pid=262332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765014910.228:62358): pid=262332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765014910.229:62359): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014910.229:62360): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765014910.230:62361): pid=262332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014910.231:62362): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=262335 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=CRED_DISP msg=audit(1765014910.231:62363): pid=262332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014910.256:62364): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014910.256:62365): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014910.608:62366): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=255451 suid=1000 rport=33962 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014910.608:62367): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=255451 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014910.611:62368): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1765014910.612:62369): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014910.612:62370): pid=255448 uid=0 auid=1000 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=255448 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=SERVICE_START msg=audit(1765014912.484:62371): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014912.575:62372): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014914.471:62373): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014914.588:62374): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765014916.109:62375): pid=262397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765014916.109:62376): pid=262397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E6620707269767365702D68656C706572202D2D636F6E6669672D66696C65202F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66202D2D636F6E6669672D646972202F6574632F6E657574726F6E2E636F6E662E64202D2D707269767365705F636F6E74657874206E657574726F6E2E70726976696C656765642E64656661756C74202D2D707269767365705F736F636B5F70617468202F746D702F746D7070336E6A706A67692F707269767365702E736F636B exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765014916.110:62377): pid=262397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765014916.111:62378): pid=262397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014916.697:62379): pid=262397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765014916.698:62380): pid=262397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765014917.240:62381): pid=262406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765014917.240:62382): pid=262406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E6620707269767365702D68656C706572202D2D636F6E6669672D66696C65202F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66202D2D636F6E6669672D646972202F6574632F6E657574726F6E2E636F6E662E64202D2D707269767365705F636F6E74657874206E657574726F6E2E70726976696C656765642E6E616D6573706163655F636D64202D2D707269767365705F736F636B5F70617468202F746D702F746D706134757275667A7A2F707269767365702E736F636B exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765014917.241:62383): pid=262406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765014917.242:62384): pid=262406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014917.837:62385): pid=262406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765014917.837:62386): pid=262406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765014918.821:62387): pid=262418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765014918.822:62388): pid=262418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E6620707269767365702D68656C706572202D2D636F6E6669672D66696C65202F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66202D2D636F6E6669672D646972202F6574632F6E657574726F6E2E636F6E662E64202D2D707269767365705F636F6E74657874206E657574726F6E2E70726976696C656765642E6C696E6B5F636D64202D2D707269767365705F736F636B5F70617468202F746D702F746D70346239363872316E2F707269767365702E736F636B exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765014918.822:62389): pid=262418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765014918.823:62390): pid=262418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014919.389:62391): pid=262418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765014919.390:62392): pid=262418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014919.481:62393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014919.604:62394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765014920.826:62395): dev=tap5a7c43c6-fc prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765014920.826:62395): arch=c000003e syscall=46 success=yes exit=60 a0=34 a1=7fff2bfe50a0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765014920.826:62395): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=NETFILTER_CFG msg=audit(1765014920.933:62396): table=filter:2 family=2 entries=18 op=nft_register_chain pid=262490 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765014920.933:62396): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffe64968280 a2=0 a3=7ffe6496826c items=0 ppid=262401 pid=262490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765014920.933:62396): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765014920.950:62397): table=mangle:3 family=2 entries=24 op=nft_register_chain pid=262490 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765014920.950:62397): arch=c000003e syscall=46 success=yes exit=3652 a0=3 a1=7ffe64968280 a2=0 a3=7ffe6496826c items=0 ppid=262401 pid=262490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765014920.950:62397): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765014920.950:62398): table=raw:4 family=2 entries=9 op=nft_register_chain pid=262490 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765014920.950:62398): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffe64968280 a2=0 a3=100 items=0 ppid=262401 pid=262490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765014920.950:62398): proctitle=69707461626C65732D726573746F7265002D6E
type=USER_ACCT msg=audit(1765014920.973:62399): pid=262492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765014920.973:62400): pid=262492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E6620707269767365702D68656C706572202D2D636F6E6669672D66696C65202F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66202D2D636F6E6669672D646972202F6574632F6E657574726F6E2E636F6E662E64202D2D707269767365705F636F6E74657874206E657574726F6E2E70726976696C656765642E64656661756C74202D2D707269767365705F736F636B5F70617468202F746D702F746D707770393779686A612F707269767365702E736F636B exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765014920.973:62401): pid=262492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765014920.974:62402): pid=262492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=NETFILTER_CFG msg=audit(1765014920.991:62403): table=filter:5 family=10 entries=18 op=nft_register_chain pid=262496 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765014920.991:62403): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffe330e7310 a2=0 a3=7ffe330e72fc items=0 ppid=262401 pid=262496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765014920.991:62403): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765014920.992:62404): table=mangle:6 family=10 entries=22 op=nft_register_chain pid=262496 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765014920.992:62404): arch=c000003e syscall=46 success=yes exit=3304 a0=3 a1=7ffe330e7310 a2=0 a3=7ffe330e72fc items=0 ppid=262401 pid=262496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765014920.992:62404): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765014921.016:62405): table=raw:7 family=10 entries=9 op=nft_register_chain pid=262496 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765014921.016:62405): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffe330e7310 a2=0 a3=100 items=0 ppid=262401 pid=262496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765014921.016:62405): proctitle=6970367461626C65732D726573746F7265002D6E
type=USER_ACCT msg=audit(1765014921.404:62406): pid=262515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765014921.404:62407): pid=262515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd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exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765014921.405:62408): pid=262515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765014921.406:62409): pid=262515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014921.517:62410): pid=262492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765014921.517:62411): pid=262492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765014921.862:62412): prog-id=2014 op=LOAD
type=SYSCALL msg=audit(1765014921.862:62412): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffe703d21f0 a2=90 a3=9500000001 items=0 ppid=262559 pid=262560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765014921.862:62412): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F353339643933393664333737623365623237323732616462633031633166
type=USER_END msg=audit(1765014921.921:62413): pid=262515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765014921.922:62414): pid=262515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014923.444:62415): pid=262565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=262565 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765014923.445:62416): pid=262564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=262565 suid=74 rport=55304 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765014923.446:62417): pid=262564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=262565 suid=74 rport=55304 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765014923.567:62418): pid=262564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014923.567:62419): pid=262564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:e0:39:03:0c:58:11:ed:73:22:37:9b:fb:b5:96:ae:e6:c9:d5:b4:79:86:de:e9:6d:a3:5f:2e:d5:1c:00:d2:eb exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765014923.597:62420): pid=262564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765014923.597:62421): pid=262564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=262565 suid=74 rport=55304 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765014923.599:62422): pid=262564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765014923.600:62423): pid=262564 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=59 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1765014923.600:62423): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe46054980 a2=4 a3=3e8 items=0 ppid=182854 pid=262564 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=59 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765014923.600:62423): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765014923.601:62424): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1765014923.661:62425): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014923.662:62426): pid=262567 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=262567 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=CRED_ACQ msg=audit(1765014923.664:62427): pid=262567 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1765014923.709:62428): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014923.709:62429): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014923.711:62430): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=262568 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014923.743:62431): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014923.744:62432): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014923.768:62433): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014923.768:62434): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014923.769:62435): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=262584 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014923.800:62436): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014923.800:62437): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014924.264:62438): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014924.265:62439): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014924.266:62440): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=262606 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014924.301:62441): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014924.302:62442): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014924.333:62443): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014924.333:62444): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014924.335:62445): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=262623 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014924.428:62446): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014924.428:62447): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014924.457:62448): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014924.457:62449): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014924.459:62450): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=262639 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014924.493:62451): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014924.493:62452): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014924.512:62453): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014924.512:62454): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014924.515:62455): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=262656 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014925.190:62456): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014925.191:62457): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014925.489:62458): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014925.489:62459): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014925.491:62460): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=262680 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014925.526:62461): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014925.526:62462): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014926.059:62463): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014926.059:62464): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014926.061:62465): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=262697 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014926.106:62466): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014926.106:62467): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014926.172:62468): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014926.172:62469): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014926.174:62470): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=262713 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014926.213:62471): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014926.214:62472): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014926.319:62473): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014926.319:62474): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014926.320:62475): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=262735 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014926.409:62476): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014926.410:62477): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014926.428:62478): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014926.428:62479): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014926.430:62480): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=262751 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014926.463:62481): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014926.464:62482): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014926.480:62483): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014926.480:62484): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014926.481:62485): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=262768 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=SERVICE_START msg=audit(1765014929.605:62486): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014929.716:62487): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014929.716:62488): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_STOP msg=audit(1765014929.729:62489): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765014929.742:62490): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014929.742:62491): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014929.743:62492): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=262949 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014929.767:62493): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014929.767:62494): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014933.144:62495): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014933.144:62496): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014933.145:62497): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=262967 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014933.179:62498): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014933.179:62499): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014933.198:62500): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014933.199:62501): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014933.200:62502): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=262983 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014933.238:62503): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014933.238:62504): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014933.290:62505): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014933.290:62506): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014933.291:62507): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=263005 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014933.353:62508): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014933.353:62509): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014933.370:62510): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014933.370:62511): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014933.372:62512): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=263021 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014933.401:62513): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014933.401:62514): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014933.414:62515): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014933.414:62516): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014933.416:62517): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=263038 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014933.486:62518): pid=263057 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014933.487:62519): pid=263057 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B7A6C6E756F676F7576626C6C6E7771666D777570637A7171657A74657A6C77203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343933332E3138313338372D3130332D3132303434333633323330303934362F416E736962616C6C5A5F73657475702E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014933.488:62520): pid=263057 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014933.493:62521): pid=263057 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014934.142:62522): pid=263057 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014934.142:62523): pid=263057 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014934.145:62524): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014934.146:62525): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014934.294:62526): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014934.294:62527): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014934.295:62528): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=263068 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014934.353:62529): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014934.354:62530): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014934.376:62531): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014934.376:62532): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014934.377:62533): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=263084 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014934.410:62534): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014934.410:62535): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014934.437:62536): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014934.437:62537): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014934.438:62538): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=263101 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014934.504:62539): pid=263120 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014934.504:62540): pid=263120 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F69676F7362696768696D717662737A77636275706A7578656D766C61796167203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343933332E3138313338372D3130332D3132303434333633323330303934362F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014934.505:62541): pid=263120 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014934.508:62542): pid=263120 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_LOGIN msg=audit(1765014934.826:62543): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014934.826:62544): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014934.890:62545): pid=263124 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014934.890:62546): pid=263124 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014934.891:62547): pid=263124 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014934.895:62548): pid=263124 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014934.897:62549): pid=263124 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014934.898:62550): pid=263124 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014934.905:62551): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014934.905:62552): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014934.922:62553): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014934.922:62554): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014934.978:62555): pid=263142 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014934.978:62556): pid=263142 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014934.978:62557): pid=263142 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014934.981:62558): pid=263142 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765014935.481:62559): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014935.485:62560): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014935.602:62561): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014935.697:62562): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014936.592:62563): pid=263142 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014936.592:62564): pid=263142 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014936.598:62565): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014936.599:62566): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014936.638:62567): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014936.638:62568): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014936.702:62569): pid=263334 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014936.702:62570): pid=263334 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014936.703:62571): pid=263334 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014936.708:62572): pid=263334 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014936.711:62573): pid=263334 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014936.711:62574): pid=263334 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014936.715:62575): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014936.715:62576): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014936.718:62577): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014936.719:62578): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014936.780:62579): pid=263352 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014936.780:62580): pid=263352 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014936.781:62581): pid=263352 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014936.784:62582): pid=263352 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014937.416:62583): pid=263352 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014937.416:62584): pid=263352 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014937.452:62585): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014937.452:62586): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765014937.474:62587): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014937.638:62588): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765014937.888:62589): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014937.888:62590): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765014937.890:62591): pid=263120 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014937.890:62592): pid=263120 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014937.894:62593): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014937.894:62594): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765014937.948:62595): pid=263421 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014937.949:62596): pid=263421 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014937.949:62597): pid=263421 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014937.953:62598): pid=263421 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014937.955:62599): pid=263421 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014937.956:62600): pid=263421 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014937.960:62601): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014937.960:62602): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014937.973:62603): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014937.973:62604): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014937.974:62605): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=263439 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014938.007:62606): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014938.008:62607): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014938.262:62608): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014938.262:62609): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014938.264:62610): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=263456 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014938.297:62611): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014938.297:62612): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014938.309:62613): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014938.309:62614): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014938.310:62615): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=263472 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014938.350:62616): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014938.350:62617): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014938.530:62618): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014938.530:62619): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014938.531:62620): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=263494 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014938.596:62621): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014938.596:62622): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014938.612:62623): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014938.612:62624): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014938.613:62625): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=263510 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014938.648:62626): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014938.648:62627): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014938.663:62628): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014938.663:62629): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014938.665:62630): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=263527 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014938.730:62631): pid=263546 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014938.730:62632): pid=263546 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F646A786A6163627668686E62647965737A616E6C676C696379637874796D79203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343933382E3239393130392D3134302D39373533353731343132303935352F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014938.731:62633): pid=263546 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014938.734:62634): pid=263546 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014938.926:62635): pid=263546 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014938.926:62636): pid=263546 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014938.930:62637): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014938.930:62638): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014938.949:62639): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014938.949:62640): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014938.950:62641): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=263549 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014938.978:62642): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014938.978:62643): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014939.356:62644): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014939.356:62645): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014939.358:62646): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=263566 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014939.391:62647): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014939.391:62648): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014939.414:62649): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014939.414:62650): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014939.416:62651): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=263582 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014939.454:62652): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014939.454:62653): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014939.588:62654): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014939.588:62655): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014939.590:62656): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=263604 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014939.644:62657): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014939.644:62658): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014939.661:62659): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014939.661:62660): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014939.663:62661): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=263620 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014939.694:62662): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014939.694:62663): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014939.706:62664): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014939.706:62665): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014939.708:62666): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=263637 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014939.772:62667): pid=263656 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014939.772:62668): pid=263656 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C7061706679736770747663676B6162797A656F6462767167747375736E6878203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343933392E3339333537362D3137302D39383838353830313638363937302F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014939.773:62669): pid=263656 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014939.776:62670): pid=263656 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014939.996:62671): pid=263656 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014939.996:62672): pid=263656 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014940.000:62673): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014940.000:62674): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014940.019:62675): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014940.019:62676): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014940.021:62677): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=263660 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014940.048:62678): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014940.048:62679): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014940.400:62680): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014940.400:62681): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014940.402:62682): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=263677 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014940.434:62683): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014940.434:62684): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014940.456:62685): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014940.456:62686): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014940.458:62687): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=263693 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014940.497:62688): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014940.497:62689): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014940.538:62690): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014940.539:62691): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014940.540:62692): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=263715 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014940.601:62693): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014940.601:62694): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014940.624:62695): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014940.624:62696): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014940.625:62697): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=263731 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014940.661:62698): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014940.661:62699): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014940.682:62700): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014940.682:62701): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014940.683:62702): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=263748 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014940.756:62703): pid=263767 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014940.756:62704): pid=263767 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616E7A6667646A727561626E6E686C65796D6267736A62706578727A6A70617A203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343934302E343336343235322D3139392D3139393236343434393930383237372F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014940.757:62705): pid=263767 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014940.759:62706): pid=263767 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014941.038:62707): pid=263767 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014941.038:62708): pid=263767 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014941.042:62709): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014941.042:62710): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014941.064:62711): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014941.064:62712): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014941.066:62713): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=263772 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014941.102:62714): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014941.103:62715): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014941.492:62716): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014941.492:62717): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014941.493:62718): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=263789 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014941.525:62719): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014941.526:62720): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014941.545:62721): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014941.545:62722): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014941.546:62723): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=263805 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014941.583:62724): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014941.584:62725): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014941.699:62726): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014941.699:62727): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014941.700:62728): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=263827 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014941.747:62729): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014941.747:62730): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014941.764:62731): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014941.764:62732): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014941.765:62733): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=263843 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014941.795:62734): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014941.795:62735): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014942.023:62736): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014942.023:62737): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014942.025:62738): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=263860 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014942.092:62739): pid=263879 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014942.092:62740): pid=263879 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716F7866756965796962736D62707073656E6A777A646578666B706862677579203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343934312E353238323436322D3233332D34343331343331393033313030302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014942.093:62741): pid=263879 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014942.095:62742): pid=263879 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014942.306:62743): pid=263879 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014942.307:62744): pid=263879 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014942.309:62745): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014942.309:62746): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014942.324:62747): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014942.325:62748): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014942.326:62749): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=263882 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014942.357:62750): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014942.357:62751): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014942.614:62752): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014942.614:62753): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014942.625:62754): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=263899 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014942.657:62755): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014942.657:62756): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014942.670:62757): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014942.670:62758): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014942.672:62759): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=263915 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014942.712:62760): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014942.712:62761): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014943.045:62762): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014943.046:62763): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014943.047:62764): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=263937 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014943.105:62765): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014943.105:62766): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014943.126:62767): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014943.126:62768): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014943.127:62769): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=263953 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014943.164:62770): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014943.164:62771): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014943.180:62772): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014943.180:62773): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014943.182:62774): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=263970 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014943.238:62775): pid=263989 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014943.238:62776): pid=263989 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A7279677378747861646F6477686F6D707762647A6F686D6A62796F6F716A69203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343934322E3635393337362D3235392D3236353432323330373637313530352F416E736962616C6C5A5F73797374656D645F736572766963652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014943.239:62777): pid=263989 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014943.260:62778): pid=263989 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1765014943.262:62779): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014943.363:62780): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014943.632:62781): pid=263989 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014943.632:62782): pid=263989 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014943.636:62783): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014943.636:62784): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014943.664:62785): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014943.665:62786): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014943.666:62787): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264013 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014943.695:62788): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014943.695:62789): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014943.910:62790): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014943.910:62791): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014943.911:62792): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264030 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014943.942:62793): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014943.942:62794): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014943.963:62795): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014943.963:62796): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014943.964:62797): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264046 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014944.000:62798): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014944.000:62799): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014944.044:62800): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014944.044:62801): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014944.046:62802): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264068 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014944.142:62803): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014944.143:62804): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014944.160:62805): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014944.160:62806): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014944.162:62807): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264084 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014944.192:62808): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014944.193:62809): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014944.210:62810): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014944.210:62811): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014944.212:62812): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264101 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014944.278:62813): pid=264120 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014944.278:62814): pid=264120 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6579796468666A7479646B6977766E62706D64756C63687568736E6A656873203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343934332E393435323032382D3238332D3233383439343739343738353330312F416E736962616C6C5A5F73797374656D645F736572766963652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014944.279:62815): pid=264120 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014944.282:62816): pid=264120 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1765014944.615:62817): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014944.669:62818): pid=264120 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014944.670:62819): pid=264120 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014944.673:62820): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014944.673:62821): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014944.695:62822): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014944.695:62823): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014944.695:62824): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264140 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=SERVICE_STOP msg=audit(1765014944.716:62825): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014944.727:62826): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014944.727:62827): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014946.106:62828): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014946.106:62829): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014946.108:62830): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264163 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014946.146:62831): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014946.146:62832): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014946.193:62833): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014946.193:62834): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014946.194:62835): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264179 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014946.232:62836): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014946.232:62837): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014946.257:62838): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014946.257:62839): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014946.258:62840): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264201 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014946.316:62841): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014946.317:62842): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014946.331:62843): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014946.331:62844): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014946.332:62845): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264217 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014946.360:62846): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014946.361:62847): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014946.371:62848): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014946.372:62849): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014946.373:62850): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264234 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014946.430:62851): pid=264253 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014946.430:62852): pid=264253 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A666A6B626C696C6C796876636D747778736C6E6B62706A6E6D65716E64736D203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343934362E313437363436322D3331372D3134353936333631363034353030322F416E736962616C6C5A5F736572766963655F66616374732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014946.432:62853): pid=264253 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014946.436:62854): pid=264253 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1765014949.641:62855): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014949.869:62856): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014953.850:62857): pid=264253 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014953.850:62858): pid=264253 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014953.855:62859): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014953.855:62860): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014953.882:62861): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014953.882:62862): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014953.883:62863): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264424 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014953.917:62864): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014953.917:62865): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014954.319:62866): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014954.319:62867): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014954.320:62868): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264441 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014954.352:62869): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014954.352:62870): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014954.363:62871): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014954.364:62872): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014954.365:62873): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264457 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014954.401:62874): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014954.401:62875): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014954.581:62876): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014954.581:62877): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014954.582:62878): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264479 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014954.660:62879): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014954.661:62880): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014954.673:62881): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014954.673:62882): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014954.675:62883): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264495 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014954.706:62884): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014954.706:62885): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014954.725:62886): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014954.725:62887): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014954.726:62888): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264512 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014954.796:62889): pid=264531 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014954.796:62890): pid=264531 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756F736B7A6F6E67626D6B6B7A6871696962787A61697A666E616C6372776F72203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343935342E3335353033332D3334372D3139393139353037333839333933372F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014954.797:62891): pid=264531 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014954.802:62892): pid=264531 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014955.031:62893): pid=264531 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014955.032:62894): pid=264531 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014955.035:62895): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014955.035:62896): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014955.061:62897): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014955.062:62898): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014955.063:62899): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264534 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014955.090:62900): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014955.090:62901): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014955.279:62902): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014955.279:62903): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014955.279:62904): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264551 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014955.311:62905): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014955.311:62906): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014955.331:62907): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014955.331:62908): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014955.333:62909): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264567 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014955.368:62910): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014955.368:62911): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014955.496:62912): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014955.497:62913): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014955.498:62914): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264589 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014955.574:62915): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014955.574:62916): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014955.606:62917): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014955.607:62918): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014955.608:62919): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264605 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014955.640:62920): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014955.640:62921): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014955.653:62922): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014955.653:62923): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014955.655:62924): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264622 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014955.718:62925): pid=264641 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014955.719:62926): pid=264641 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7470716C6E7A61636568666D66656A797A777367656364766C6B64616E6E6575203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343935352E333136353035342D3337312D3139383331373936303933303435322F416E736962616C6C5A5F6D6F6470726F62652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014955.720:62927): pid=264641 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014955.723:62928): pid=264641 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014955.928:62929): pid=264641 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014955.928:62930): pid=264641 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014955.932:62931): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014955.932:62932): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014955.950:62933): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014955.950:62934): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014955.951:62935): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264644 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014955.979:62936): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014955.980:62937): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014956.141:62938): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014956.142:62939): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014956.143:62940): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264661 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014956.173:62941): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014956.173:62942): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014956.189:62943): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014956.189:62944): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014956.190:62945): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264677 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014956.226:62946): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014956.226:62947): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014956.289:62948): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014956.289:62949): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014956.289:62950): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264699 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014956.342:62951): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014956.342:62952): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014956.353:62953): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014956.353:62954): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014956.354:62955): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264715 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014956.388:62956): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014956.388:62957): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014956.401:62958): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014956.402:62959): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014956.403:62960): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264732 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014956.460:62961): pid=264751 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014956.460:62962): pid=264751 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726F79756A67736A7166737574667A69696E6E66696E6D6363766D6D6F6F6C66203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343935362E313735313438322D3339352D3130303931333935333633373830392F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014956.461:62963): pid=264751 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014956.463:62964): pid=264751 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014956.655:62965): pid=264751 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014956.656:62966): pid=264751 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014956.660:62967): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014956.660:62968): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014956.692:62969): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014956.692:62970): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014956.693:62971): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264756 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014956.745:62972): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014956.745:62973): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014956.758:62974): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014956.758:62975): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014956.760:62976): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264772 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014956.792:62977): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014956.792:62978): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014956.810:62979): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014956.810:62980): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014956.811:62981): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264789 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014956.877:62982): pid=264808 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014956.877:62983): pid=264808 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646A6773687461736A766F6E69656C656B637062636868736277696D6179636E203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343935362E313735313438322D3339352D3130303931333935333633373830392F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014956.878:62984): pid=264808 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014956.880:62985): pid=264808 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014957.095:62986): pid=264808 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014957.096:62987): pid=264808 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014957.099:62988): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014957.100:62989): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014957.124:62990): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014957.124:62991): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014957.125:62992): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264811 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014957.157:62993): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014957.157:62994): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014957.476:62995): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014957.477:62996): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014957.478:62997): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264828 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014957.508:62998): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014957.509:62999): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014957.526:63000): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014957.527:63001): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014957.528:63002): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264844 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014957.564:63003): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014957.564:63004): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014957.594:63005): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014957.594:63006): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014957.596:63007): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264866 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014957.645:63008): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014957.645:63009): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014957.662:63010): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014957.662:63011): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014957.663:63012): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264882 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014957.693:63013): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014957.693:63014): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014957.704:63015): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014957.705:63016): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014957.706:63017): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264899 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014957.764:63018): pid=264918 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014957.765:63019): pid=264918 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78686A78726D71756E756F73626272726A74737A6A626C656F64686971667866203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343935372E353131383430382D3433332D3236353632363438373137303338302F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014957.766:63020): pid=264918 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014957.769:63021): pid=264918 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014957.941:63022): pid=264918 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014957.942:63023): pid=264918 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014957.945:63024): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014957.945:63025): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014957.967:63026): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014957.968:63027): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014957.969:63028): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264921 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014957.996:63029): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014957.997:63030): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014958.255:63031): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014958.255:63032): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014958.256:63033): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264938 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014958.288:63034): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014958.288:63035): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014958.302:63036): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014958.302:63037): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014958.303:63038): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264954 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014958.337:63039): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014958.338:63040): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014958.363:63041): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014958.364:63042): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014958.365:63043): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264976 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014958.432:63044): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014958.432:63045): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014958.447:63046): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014958.447:63047): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014958.449:63048): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=264992 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014958.483:63049): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014958.483:63050): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014958.498:63051): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014958.498:63052): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014958.499:63053): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265009 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014958.567:63054): pid=265028 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014958.567:63055): pid=265028 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7079656D6468757877776768706272716A626F63757A71656F78636163776164203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343935382E323930383635342D3436312D3230333034353535393630303130392F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014958.568:63056): pid=265028 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014958.573:63057): pid=265028 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014958.799:63058): pid=265028 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014958.800:63059): pid=265028 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014958.804:63060): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014958.804:63061): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014958.820:63062): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014958.821:63063): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014958.822:63064): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265031 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014958.851:63065): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014958.852:63066): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014959.083:63067): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014959.083:63068): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014959.084:63069): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265048 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014959.116:63070): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014959.116:63071): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014959.127:63072): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014959.127:63073): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014959.129:63074): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265064 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014959.163:63075): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014959.163:63076): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014959.194:63077): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014959.194:63078): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014959.196:63079): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265086 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014959.253:63080): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014959.253:63081): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014959.283:63082): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014959.284:63083): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014959.285:63084): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265102 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014959.319:63085): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014959.319:63086): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014959.333:63087): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014959.333:63088): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014959.335:63089): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265119 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014959.396:63090): pid=265138 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014959.396:63091): pid=265138 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686174646C677368626C616A6D7A6365796567786F716A667171777062677567203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343935392E313138303836362D3438372D3230383133393339393439343034342F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014959.396:63092): pid=265138 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014959.398:63093): pid=265138 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014959.632:63094): pid=265138 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014959.632:63095): pid=265138 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014959.636:63096): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014959.636:63097): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014959.658:63098): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014959.658:63099): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014959.660:63100): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265143 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014959.689:63101): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014959.689:63102): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014960.059:63103): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014960.060:63104): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014960.062:63105): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265160 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014960.094:63106): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014960.094:63107): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014960.105:63108): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014960.106:63109): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014960.107:63110): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265176 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014960.139:63111): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014960.139:63112): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014960.160:63113): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014960.160:63114): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014960.162:63115): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265198 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014960.219:63116): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014960.219:63117): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014960.232:63118): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014960.232:63119): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014960.234:63120): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265214 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014960.267:63121): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014960.268:63122): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014960.284:63123): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014960.284:63124): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014960.286:63125): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265231 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014960.355:63126): pid=265250 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014960.355:63127): pid=265250 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666A646869787A7867776E70727A7A766F6278676272746C6F6365757072666B203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343936302E303936323433342D3531352D3230353331333837303135313030372F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014960.356:63128): pid=265250 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014960.368:63129): pid=265250 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1765014960.370:63130): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014960.487:63131): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014960.610:63132): pid=265250 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014960.611:63133): pid=265250 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014960.614:63134): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014960.614:63135): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014960.638:63136): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014960.638:63137): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014960.639:63138): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265275 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014960.667:63139): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014960.667:63140): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014960.898:63141): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014960.899:63142): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014960.900:63143): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265292 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014960.928:63144): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014960.928:63145): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014960.939:63146): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014960.940:63147): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014960.941:63148): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265308 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014960.979:63149): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014960.979:63150): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014961.012:63151): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014961.012:63152): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014961.013:63153): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265330 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014961.073:63154): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014961.073:63155): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014961.091:63156): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014961.091:63157): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014961.092:63158): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265346 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014961.126:63159): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014961.127:63160): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014961.150:63161): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014961.150:63162): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014961.151:63163): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265363 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014961.219:63164): pid=265382 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014961.219:63165): pid=265382 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70647861746274716875617A6F746275797169696E727765676E667767736A63203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343936302E393330313633362D3534322D38333039323137343336363730302F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014961.220:63166): pid=265382 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014961.223:63167): pid=265382 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014961.456:63168): pid=265382 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014961.456:63169): pid=265382 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014961.460:63170): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014961.461:63171): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014961.480:63172): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014961.480:63173): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014961.482:63174): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265386 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014961.510:63175): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014961.510:63176): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014961.751:63177): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014961.752:63178): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014961.753:63179): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265403 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014961.779:63180): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014961.779:63181): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014961.791:63182): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014961.791:63183): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014961.792:63184): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265419 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014961.824:63185): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014961.824:63186): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014962.048:63187): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014962.048:63188): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014962.050:63189): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265441 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014962.102:63190): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014962.102:63191): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014962.116:63192): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014962.116:63193): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014962.117:63194): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265457 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014962.157:63195): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014962.157:63196): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014962.176:63197): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014962.176:63198): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014962.178:63199): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265474 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014962.242:63200): pid=265493 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014962.242:63201): pid=265493 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706A6E6E6E77747377716F766D7575656770776B646B706466636C617361696A203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343936312E373831363835342D3537322D34353831363637383238303535322F416E736962616C6C5A5F7265706C6163652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014962.243:63202): pid=265493 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014962.245:63203): pid=265493 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014962.455:63204): pid=265493 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014962.456:63205): pid=265493 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014962.460:63206): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014962.460:63207): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014962.487:63208): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014962.487:63209): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014962.488:63210): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265497 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014962.516:63211): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014962.516:63212): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014962.698:63213): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014962.698:63214): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014962.699:63215): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265514 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014962.724:63216): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014962.724:63217): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014962.742:63218): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014962.742:63219): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014962.743:63220): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265530 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014962.802:63221): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014962.802:63222): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014962.832:63223): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014962.832:63224): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014962.833:63225): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265552 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014962.883:63226): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014962.883:63227): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014962.899:63228): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014962.899:63229): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014962.900:63230): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265568 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014962.926:63231): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014962.926:63232): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014962.943:63233): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014962.943:63234): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014962.944:63235): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265585 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014962.987:63236): pid=265604 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014962.987:63237): pid=265604 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656D66786A736A6F6F756E76796F6D6B686D6B6472647064726A6D6166736D78203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343936322E373236363238382D3539392D31353435383935363834383432332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014962.988:63238): pid=265604 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014962.990:63239): pid=265604 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014963.172:63240): pid=265604 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014963.172:63241): pid=265604 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014963.175:63242): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014963.175:63243): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014963.196:63244): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014963.196:63245): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014963.198:63246): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265607 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014963.230:63247): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014963.230:63248): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014963.261:63249): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014963.261:63250): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014963.263:63251): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265624 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014963.285:63252): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014963.286:63253): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014963.297:63254): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014963.297:63255): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014963.298:63256): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265640 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014963.326:63257): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014963.327:63258): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014963.357:63259): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014963.357:63260): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014963.358:63261): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265662 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014963.412:63262): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014963.412:63263): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014963.426:63264): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014963.426:63265): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014963.427:63266): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265678 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014963.448:63267): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014963.448:63268): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014963.465:63269): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014963.465:63270): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014963.466:63271): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265695 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014963.516:63272): pid=265714 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014963.516:63273): pid=265714 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686C70706A66797A646479657975766F7379786F796E726662676D77796E6D75203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343936332E323837323437372D3539392D31323333383339313436323535352F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014963.517:63274): pid=265714 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014963.519:63275): pid=265714 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014963.734:63276): pid=265714 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014963.734:63277): pid=265714 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014963.738:63278): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014963.739:63279): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014963.759:63280): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014963.759:63281): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014963.760:63282): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265717 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014963.792:63283): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014963.792:63284): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014963.841:63285): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014963.841:63286): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014963.843:63287): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265734 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014963.871:63288): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014963.872:63289): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014963.887:63290): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014963.887:63291): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014963.889:63292): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265750 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014963.930:63293): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014963.931:63294): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014963.969:63295): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014963.969:63296): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014963.971:63297): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265772 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014964.031:63298): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014964.032:63299): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014964.062:63300): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014964.063:63301): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014964.064:63302): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265788 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014964.098:63303): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014964.098:63304): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014964.117:63305): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014964.117:63306): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014964.119:63307): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265805 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014964.181:63308): pid=265824 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014964.182:63309): pid=265824 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64766D7869717A76676D716D6B796C686B6B756F70717364796F6E6777696479203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343936332E383733363831332D3539392D3237353030303932373639333631382F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014964.182:63310): pid=265824 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014964.185:63311): pid=265824 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014964.395:63312): pid=265824 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014964.395:63313): pid=265824 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014964.398:63314): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014964.399:63315): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014964.416:63316): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014964.416:63317): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014964.417:63318): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265827 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014964.457:63319): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014964.457:63320): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014964.519:63321): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014964.519:63322): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014964.521:63323): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265844 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014964.552:63324): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014964.552:63325): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014964.574:63326): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014964.574:63327): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014964.575:63328): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265860 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014964.613:63329): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014964.614:63330): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014964.647:63331): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014964.647:63332): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014964.648:63333): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265882 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014964.717:63334): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014964.717:63335): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014964.743:63336): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014964.743:63337): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014964.744:63338): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265898 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014964.775:63339): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014964.775:63340): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014964.821:63341): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014964.821:63342): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014964.823:63343): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265915 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014964.880:63344): pid=265934 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014964.880:63345): pid=265934 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6D75757772757873786E74706F656763786A78786376736B62746A646F6466203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343936342E353534363734392D3539392D3133313732303135343635313534342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014964.881:63346): pid=265934 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014964.885:63347): pid=265934 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014965.083:63348): pid=265934 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014965.084:63349): pid=265934 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014965.087:63350): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014965.087:63351): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014965.134:63352): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014965.134:63353): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014965.135:63354): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265937 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014965.165:63355): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014965.165:63356): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014965.416:63357): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014965.417:63358): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014965.418:63359): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265954 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014965.452:63360): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014965.452:63361): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014965.475:63362): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014965.475:63363): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014965.476:63364): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265970 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014965.513:63365): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014965.513:63366): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014965.561:63367): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014965.561:63368): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014965.563:63369): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=265992 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014965.614:63370): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014965.614:63371): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014965.628:63372): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014965.628:63373): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014965.629:63374): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266008 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014965.660:63375): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014965.660:63376): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014965.675:63377): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014965.675:63378): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014965.677:63379): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266025 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014965.738:63380): pid=266044 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014965.738:63381): pid=266044 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D697A7768676A637276717A766B736F706B7868736D6F7577696B6473646D7966203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343936352E343534313433352D3638362D35353336353832323938373132302F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014965.739:63382): pid=266044 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014965.755:63383): pid=266044 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1765014965.759:63384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014965.763:63385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014965.893:63386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014965.971:63387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014965.983:63388): pid=266044 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014965.983:63389): pid=266044 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014965.987:63390): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014965.987:63391): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014966.001:63392): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014966.001:63393): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014966.003:63394): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266090 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014966.042:63395): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014966.042:63396): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014966.512:63397): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014966.512:63398): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014966.513:63399): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266107 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014966.541:63400): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014966.541:63401): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014966.560:63402): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014966.561:63403): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014966.562:63404): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266123 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014966.599:63405): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014966.599:63406): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014966.642:63407): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014966.642:63408): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014966.643:63409): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266145 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014966.694:63410): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014966.694:63411): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014966.708:63412): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014966.708:63413): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014966.710:63414): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266161 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014966.743:63415): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014966.743:63416): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014966.763:63417): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014966.763:63418): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014966.764:63419): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266178 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014966.830:63420): pid=266197 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014966.831:63421): pid=266197 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D717765697466796C74657965646A6D7368647768647061747071796C68697475203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343936362E353433333136382D3731362D36313437343736363336333036382F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014966.832:63422): pid=266197 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014966.836:63423): pid=266197 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014967.097:63424): pid=266197 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014967.098:63425): pid=266197 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014967.100:63426): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014967.100:63427): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014967.117:63428): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014967.117:63429): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014967.118:63430): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266200 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014967.148:63431): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014967.148:63432): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014967.275:63433): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014967.275:63434): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014967.277:63435): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266217 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014967.309:63436): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014967.309:63437): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014967.327:63438): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014967.327:63439): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014967.329:63440): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266233 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014967.368:63441): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014967.368:63442): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014967.403:63443): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014967.403:63444): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014967.405:63445): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266255 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014967.453:63446): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014967.454:63447): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014967.475:63448): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014967.475:63449): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014967.477:63450): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266271 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014967.509:63451): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014967.510:63452): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014967.528:63453): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014967.528:63454): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014967.529:63455): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266288 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014967.598:63456): pid=266307 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014967.598:63457): pid=266307 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72736A6B6765666F6F6A726962676D6173667469717561776B6F6D69766A6862203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343936372E333131333735362D3734302D333136313832323039343231392F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014967.599:63458): pid=266307 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014967.601:63459): pid=266307 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014967.834:63460): pid=266307 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014967.834:63461): pid=266307 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014967.838:63462): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014967.838:63463): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014967.873:63464): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014967.873:63465): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014967.874:63466): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266312 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014967.936:63467): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014967.936:63468): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014967.959:63469): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014967.959:63470): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014967.961:63471): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266328 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014967.993:63472): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014967.993:63473): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014968.011:63474): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014968.011:63475): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014968.013:63476): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266345 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014968.073:63477): pid=266364 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014968.073:63478): pid=266364 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6A746E657977696A75656E7662676C6A6B6765636D646E747274776D666661203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343936372E333131333735362D3734302D333136313832323039343231392F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014968.073:63479): pid=266364 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014968.091:63480): pid=266364 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1765014968.093:63481): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014968.209:63482): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014968.318:63483): pid=266364 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014968.318:63484): pid=266364 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014968.322:63485): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014968.322:63486): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014968.351:63487): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014968.351:63488): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014968.352:63489): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266387 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014968.387:63490): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014968.387:63491): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014968.416:63492): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014968.416:63493): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014968.417:63494): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266404 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014968.449:63495): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014968.449:63496): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014968.461:63497): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014968.461:63498): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014968.463:63499): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266420 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014968.502:63500): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014968.502:63501): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014968.522:63502): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014968.522:63503): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014968.523:63504): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266442 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014968.570:63505): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014968.571:63506): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014968.582:63507): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014968.582:63508): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014968.583:63509): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266458 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014968.615:63510): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014968.616:63511): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014968.627:63512): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014968.627:63513): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014968.628:63514): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266475 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014968.694:63515): pid=266494 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014968.695:63516): pid=266494 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76717764767664706B6E6768706C71637A79736B68727371616A79786C787670203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343936382E343530353435352D3734302D34333732373038303931393735342F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014968.695:63517): pid=266494 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014968.698:63518): pid=266494 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014968.921:63519): pid=266494 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014968.921:63520): pid=266494 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014968.924:63521): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014968.924:63522): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014968.955:63523): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014968.956:63524): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014968.957:63525): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266500 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014969.022:63526): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014969.022:63527): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014969.045:63528): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014969.045:63529): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014969.046:63530): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266526 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014969.082:63531): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014969.083:63532): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014969.106:63533): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014969.106:63534): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014969.107:63535): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266552 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014969.172:63536): pid=266571 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014969.173:63537): pid=266571 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B73716D64696566736F7777747069766E617173646C737370757972776D706F203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343936382E343530353435352D3734302D34333732373038303931393735342F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014969.173:63538): pid=266571 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014969.176:63539): pid=266571 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014969.413:63540): pid=266571 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014969.413:63541): pid=266571 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014969.417:63542): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014969.417:63543): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014969.440:63544): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014969.441:63545): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014969.442:63546): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266576 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014969.475:63547): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014969.475:63548): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014969.689:63549): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014969.689:63550): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014969.691:63551): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266593 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014969.725:63552): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014969.725:63553): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014969.738:63554): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014969.738:63555): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014969.739:63556): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266609 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014969.781:63557): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014969.781:63558): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014969.815:63559): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014969.815:63560): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014969.817:63561): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266631 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014969.886:63562): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014969.886:63563): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014969.913:63564): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014969.913:63565): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014969.914:63566): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266647 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014969.952:63567): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014969.952:63568): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014969.965:63569): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014969.966:63570): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014969.967:63571): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266665 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014970.034:63572): pid=266684 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014970.034:63573): pid=266684 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B617062686D646779777471726F6F71797366786965636862716A7570707A75203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343936392E3732373136372D3830392D3139363039313639363239393737322F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014970.035:63574): pid=266684 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014970.038:63575): pid=266684 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014970.260:63576): pid=266684 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014970.261:63577): pid=266684 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014970.265:63578): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014970.265:63579): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014970.283:63580): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014970.283:63581): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014970.284:63582): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266706 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014970.313:63583): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014970.313:63584): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014970.439:63585): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014970.440:63586): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014970.441:63587): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266725 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014970.473:63588): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014970.473:63589): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014970.492:63590): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014970.492:63591): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014970.493:63592): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266741 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014970.531:63593): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014970.532:63594): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014970.575:63595): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014970.575:63596): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014970.577:63597): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266763 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014970.635:63598): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014970.635:63599): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014970.657:63600): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014970.657:63601): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014970.659:63602): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266779 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014970.692:63603): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014970.692:63604): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014970.713:63605): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014970.713:63606): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014970.714:63607): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266796 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014970.768:63608): pid=266815 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014970.768:63609): pid=266815 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72736A787979796D77637164626562706B666364707664666774796F7A6C6F66203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343937302E3437353433312D3833332D32383536373635393538383336332F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014970.769:63610): pid=266815 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014970.771:63611): pid=266815 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014970.977:63612): pid=266815 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014970.978:63613): pid=266815 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014970.981:63614): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014970.982:63615): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014971.017:63616): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014971.017:63617): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014971.018:63618): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266820 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014971.071:63619): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014971.071:63620): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014971.083:63621): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014971.083:63622): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014971.084:63623): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266836 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014971.111:63624): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014971.112:63625): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014971.127:63626): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014971.127:63627): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014971.128:63628): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266853 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014971.190:63629): pid=266872 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014971.190:63630): pid=266872 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6169636C626C6B7267726B6A6D66676566686D6F7178636E66776F656D6766203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343937302E3437353433312D3833332D32383536373635393538383336332F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014971.191:63631): pid=266872 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014971.194:63632): pid=266872 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014971.408:63633): pid=266872 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014971.408:63634): pid=266872 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014971.411:63635): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014971.412:63636): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014971.431:63637): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014971.432:63638): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014971.433:63639): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266875 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014971.464:63640): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014971.465:63641): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014971.660:63642): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014971.660:63643): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014971.661:63644): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266892 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014971.684:63645): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014971.685:63646): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014971.701:63647): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014971.702:63648): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014971.703:63649): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266908 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014971.739:63650): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014971.740:63651): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014971.776:63652): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014971.776:63653): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014971.777:63654): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266930 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014971.826:63655): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014971.826:63656): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014971.841:63657): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014971.841:63658): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014971.843:63659): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266946 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014971.872:63660): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014971.873:63661): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014971.891:63662): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014971.891:63663): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014971.892:63664): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266963 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014971.955:63665): pid=266982 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014971.955:63666): pid=266982 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6A787864766E68776D6B6C6E74666F7A75636870776C797A7067717766627A203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343937312E363836363736332D3836382D38363438363230313637323432332F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014971.956:63667): pid=266982 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014971.958:63668): pid=266982 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014972.181:63669): pid=266982 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014972.181:63670): pid=266982 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014972.185:63671): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014972.185:63672): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014972.211:63673): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014972.211:63674): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014972.212:63675): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=266987 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014972.264:63676): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014972.264:63677): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014972.481:63678): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014972.481:63679): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014972.482:63680): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267003 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014972.512:63681): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014972.512:63682): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014972.522:63683): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014972.522:63684): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014972.524:63685): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267020 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014972.584:63686): pid=267039 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014972.585:63687): pid=267039 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D757277767A6476736874616E676F76636F6D75756E6578736C6D616C776A786C203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343937312E363836363736332D3836382D38363438363230313637323432332F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014972.585:63688): pid=267039 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014972.587:63689): pid=267039 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014972.798:63690): pid=267039 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014972.798:63691): pid=267039 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014972.801:63692): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014972.801:63693): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014972.814:63694): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014972.814:63695): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014972.815:63696): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267042 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014972.841:63697): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014972.841:63698): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014972.985:63699): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014972.985:63700): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014972.986:63701): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267059 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014973.016:63702): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014973.016:63703): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014973.035:63704): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014973.035:63705): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014973.036:63706): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267075 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014973.068:63707): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014973.068:63708): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014973.357:63709): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014973.357:63710): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014973.359:63711): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267097 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014973.428:63712): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014973.428:63713): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014973.443:63714): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014973.443:63715): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014973.444:63716): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267113 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014973.476:63717): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014973.476:63718): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1765014973.478:63719): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765014973.497:63720): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014973.497:63721): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014973.499:63722): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267136 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014973.565:63723): pid=267160 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014973.565:63724): pid=267160 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706F7765766C75627964616166787A6C71706D706A7A646B616777706D636162203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343937332E3031383738322D3930352D3130343536333635373334313830332F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014973.566:63725): pid=267160 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014973.571:63726): pid=267160 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_STOP msg=audit(1765014973.602:63727): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765014974.183:63728): prog-id=2015 op=LOAD
type=BPF msg=audit(1765014974.183:63729): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014974.187:63730): prog-id=2016 op=LOAD
type=BPF msg=audit(1765014974.187:63731): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014974.191:63732): prog-id=2017 op=LOAD
type=BPF msg=audit(1765014974.191:63733): prog-id=2018 op=LOAD
type=BPF msg=audit(1765014974.191:63734): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014974.191:63735): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014974.192:63736): prog-id=2019 op=LOAD
type=BPF msg=audit(1765014974.192:63737): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014974.192:63738): prog-id=2020 op=LOAD
type=BPF msg=audit(1765014974.192:63739): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014974.192:63740): prog-id=2021 op=LOAD
type=BPF msg=audit(1765014974.192:63741): prog-id=2022 op=LOAD
type=BPF msg=audit(1765014974.192:63742): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014974.192:63743): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014974.194:63744): prog-id=2023 op=LOAD
type=BPF msg=audit(1765014974.194:63745): prog-id=2024 op=LOAD
type=BPF msg=audit(1765014974.194:63746): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014974.194:63747): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014974.195:63748): prog-id=2025 op=LOAD
type=BPF msg=audit(1765014974.195:63749): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014974.195:63750): prog-id=2026 op=LOAD
type=BPF msg=audit(1765014974.195:63751): prog-id=2027 op=LOAD
type=BPF msg=audit(1765014974.195:63752): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014974.195:63753): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765014974.276:63754): pid=267160 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014974.277:63755): pid=267160 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014974.281:63756): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014974.281:63757): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014974.302:63758): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014974.302:63759): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014974.303:63760): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267208 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014974.337:63761): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014974.337:63762): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1765014975.471:63763): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014975.577:63764): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765014975.604:63765): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014975.604:63766): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014975.606:63767): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267249 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014975.640:63768): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014975.640:63769): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014975.653:63770): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014975.653:63771): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014975.654:63772): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267265 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014975.678:63773): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014975.678:63774): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014975.706:63775): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014975.707:63776): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014975.708:63777): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267287 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014975.776:63778): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014975.776:63779): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014975.788:63780): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014975.788:63781): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014975.790:63782): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267303 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014975.838:63783): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014975.838:63784): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014975.857:63785): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014975.857:63786): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014975.859:63787): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267320 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014975.933:63788): pid=267339 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014975.933:63789): pid=267339 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796C64656964666A6271697A6C64736F6475666B6C62797A736E677262777A6F203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343937352E3634313539352D3933302D3138303233313137313236393337352F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014975.934:63790): pid=267339 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014975.942:63791): pid=267339 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014976.172:63792): pid=267339 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014976.172:63793): pid=267339 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014976.175:63794): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014976.175:63795): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014976.231:63796): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014976.231:63797): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014976.233:63798): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267344 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014976.294:63799): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014976.294:63800): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014976.308:63801): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014976.308:63802): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014976.310:63803): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267360 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014976.351:63804): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014976.351:63805): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014976.372:63806): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014976.372:63807): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014976.373:63808): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267377 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014976.435:63809): pid=267396 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014976.435:63810): pid=267396 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6D6B69617672726D7570616C706B69767277626C666674766B6C6B706C6F61203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343937352E3634313539352D3933302D3138303233313137313236393337352F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014976.436:63811): pid=267396 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014976.438:63812): pid=267396 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014976.650:63813): pid=267396 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014976.650:63814): pid=267396 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014976.654:63815): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014976.655:63816): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014976.665:63817): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014976.665:63818): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014976.667:63819): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267399 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014976.701:63820): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014976.701:63821): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014976.784:63822): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014976.784:63823): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014976.786:63824): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267416 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014976.818:63825): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014976.818:63826): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014976.830:63827): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014976.830:63828): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014976.831:63829): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267432 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014976.869:63830): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014976.869:63831): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014976.899:63832): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014976.899:63833): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014976.900:63834): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267454 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014976.964:63835): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014976.964:63836): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014976.981:63837): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014976.981:63838): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014976.982:63839): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267470 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014977.015:63840): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014977.015:63841): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014977.027:63842): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014977.027:63843): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014977.029:63844): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267487 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014977.081:63845): pid=267506 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014977.081:63846): pid=267506 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65707476666777796364777963647765756F7370776173717A6A63716E646973203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343937362E3831393834332D3936352D38343530343237373335383930352F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014977.081:63847): pid=267506 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014977.083:63848): pid=267506 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014977.317:63849): pid=267506 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014977.318:63850): pid=267506 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014977.322:63851): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014977.322:63852): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014977.349:63853): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014977.349:63854): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014977.350:63855): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267511 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014977.412:63856): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014977.412:63857): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014977.429:63858): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014977.429:63859): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014977.430:63860): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267527 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014977.463:63861): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014977.463:63862): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014977.478:63863): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014977.478:63864): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014977.480:63865): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267544 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014977.546:63866): pid=267563 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014977.546:63867): pid=267563 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E76777670626D72677A697675786B7A79677964777579746A75776C6F76796D203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343937362E3831393834332D3936352D38343530343237373335383930352F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014977.547:63868): pid=267563 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014977.549:63869): pid=267563 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014977.768:63870): pid=267563 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014977.768:63871): pid=267563 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014977.772:63872): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014977.772:63873): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014977.950:63874): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014977.950:63875): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014977.952:63876): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267566 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014977.984:63877): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014977.984:63878): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014978.096:63879): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014978.097:63880): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014978.098:63881): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267583 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014978.131:63882): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014978.131:63883): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014978.198:63884): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014978.198:63885): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014978.199:63886): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267599 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014978.237:63887): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014978.237:63888): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014978.262:63889): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014978.262:63890): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014978.264:63891): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267621 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014978.328:63892): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014978.329:63893): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014978.347:63894): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014978.348:63895): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014978.349:63896): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267637 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014978.383:63897): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014978.383:63898): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014978.395:63899): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014978.395:63900): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014978.397:63901): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267654 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014978.466:63902): pid=267673 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014978.466:63903): pid=267673 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716B68617862656B6B61687776766866717877696168676E68686D7878796D77203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343937382E313333313539392D313030312D38343631343639373239333739302F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014978.467:63904): pid=267673 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014978.470:63905): pid=267673 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=BPF msg=audit(1765014979.101:63906): prog-id=2028 op=LOAD
type=BPF msg=audit(1765014979.101:63907): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014979.105:63908): prog-id=2029 op=LOAD
type=BPF msg=audit(1765014979.105:63909): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014979.109:63910): prog-id=2030 op=LOAD
type=BPF msg=audit(1765014979.109:63911): prog-id=2031 op=LOAD
type=BPF msg=audit(1765014979.109:63912): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014979.109:63913): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014979.109:63914): prog-id=2032 op=LOAD
type=BPF msg=audit(1765014979.110:63915): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014979.110:63916): prog-id=2033 op=LOAD
type=BPF msg=audit(1765014979.110:63917): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014979.110:63918): prog-id=2034 op=LOAD
type=BPF msg=audit(1765014979.110:63919): prog-id=2035 op=LOAD
type=BPF msg=audit(1765014979.110:63920): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014979.110:63921): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014979.112:63922): prog-id=2036 op=LOAD
type=BPF msg=audit(1765014979.112:63923): prog-id=2037 op=LOAD
type=BPF msg=audit(1765014979.112:63924): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014979.112:63925): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014979.113:63926): prog-id=2038 op=LOAD
type=BPF msg=audit(1765014979.113:63927): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014979.113:63928): prog-id=2039 op=LOAD
type=BPF msg=audit(1765014979.113:63929): prog-id=2040 op=LOAD
type=BPF msg=audit(1765014979.113:63930): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765014979.113:63931): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765014979.196:63932): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014979.196:63933): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014979.236:63934): pid=267673 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014979.236:63935): pid=267673 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014979.240:63936): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014979.241:63937): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014979.259:63938): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014979.259:63939): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014979.260:63940): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267718 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014979.296:63941): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014979.297:63942): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014979.662:63943): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014979.662:63944): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014979.663:63945): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267735 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014979.695:63946): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014979.695:63947): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014979.707:63948): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014979.707:63949): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014979.709:63950): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267751 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014979.745:63951): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014979.745:63952): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014979.779:63953): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014979.779:63954): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014979.780:63955): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267773 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014979.842:63956): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014979.842:63957): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014979.863:63958): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014979.863:63959): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014979.865:63960): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267789 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014979.899:63961): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014979.899:63962): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014979.916:63963): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014979.916:63964): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014979.917:63965): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267806 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014979.987:63966): pid=267825 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014979.987:63967): pid=267825 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7062646E7172766C66746766786F6378796163647A68696B6E746E7677616667203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343937392E363937373534312D313033312D3137373637333735313137353231382F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014979.988:63968): pid=267825 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014980.002:63969): pid=267825 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1765014980.004:63970): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014980.220:63971): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014980.293:63972): pid=267825 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014980.293:63973): pid=267825 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014980.298:63974): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014980.298:63975): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014980.315:63976): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014980.315:63977): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014980.317:63978): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267853 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014980.353:63979): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014980.354:63980): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014980.471:63981): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014980.471:63982): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014980.472:63983): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267870 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014980.506:63984): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014980.506:63985): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014980.519:63986): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014980.519:63987): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014980.521:63988): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267886 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014980.562:63989): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014980.562:63990): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014980.590:63991): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014980.590:63992): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014980.591:63993): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267908 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014980.640:63994): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014980.640:63995): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014980.661:63996): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014980.661:63997): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014980.662:63998): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267924 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014980.696:63999): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014980.696:64000): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014980.711:64001): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014980.711:64002): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014980.713:64003): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267941 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014980.782:64004): pid=267960 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014980.782:64005): pid=267960 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D717A79686C74666273796266616D7A7965706B786564646A6775727765626667203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343938302E353039303630392D313035342D3237343031353735373536383234312F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014980.783:64006): pid=267960 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014980.786:64007): pid=267960 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014981.007:64008): pid=267960 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014981.008:64009): pid=267960 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014981.012:64010): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014981.012:64011): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014981.038:64012): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014981.038:64013): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014981.040:64014): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267965 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014981.089:64015): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014981.089:64016): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014981.109:64017): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014981.110:64018): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014981.111:64019): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267981 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014981.147:64020): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014981.147:64021): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014981.165:64022): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014981.165:64023): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014981.166:64024): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=267998 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014981.233:64025): pid=268017 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014981.233:64026): pid=268017 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6B67637577756D7375646A63616C746B687062727A69787177687369786D6C203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343938302E353039303630392D313035342D3237343031353735373536383234312F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014981.234:64027): pid=268017 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014981.237:64028): pid=268017 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014981.447:64029): pid=268017 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014981.448:64030): pid=268017 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014981.452:64031): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014981.452:64032): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014981.476:64033): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014981.476:64034): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014981.478:64035): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268020 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014981.515:64036): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014981.515:64037): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014981.927:64038): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014981.927:64039): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014981.929:64040): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268037 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014981.966:64041): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014981.966:64042): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014981.978:64043): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014981.978:64044): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014981.980:64045): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268053 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014982.022:64046): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014982.022:64047): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014982.051:64048): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014982.051:64049): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014982.053:64050): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268075 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014982.132:64051): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014982.132:64052): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014982.160:64053): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014982.160:64054): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014982.162:64055): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268091 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014982.198:64056): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014982.199:64057): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014982.217:64058): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014982.217:64059): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014982.220:64060): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268108 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014982.285:64061): pid=268127 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014982.285:64062): pid=268127 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6367786E70776B686266647263777A6A666C6379647671797373796D6B667A6D203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343938312E393638393535332D313039372D34323530313733353037373932362F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014982.286:64063): pid=268127 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014982.289:64064): pid=268127 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014982.521:64065): pid=268127 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014982.521:64066): pid=268127 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014982.525:64067): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014982.526:64068): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014982.545:64069): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014982.546:64070): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014982.547:64071): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268130 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014982.586:64072): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014982.586:64073): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014982.791:64074): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014982.791:64075): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014982.793:64076): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268147 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014982.827:64077): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014982.827:64078): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014982.845:64079): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014982.846:64080): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014982.847:64081): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268163 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014982.881:64082): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014982.881:64083): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014982.937:64084): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014982.937:64085): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014982.939:64086): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268185 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014982.998:64087): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014982.999:64088): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014983.020:64089): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014983.020:64090): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014983.022:64091): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268201 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014983.056:64092): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014983.056:64093): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014983.071:64094): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014983.071:64095): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014983.072:64096): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268218 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014983.143:64097): pid=268237 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014983.143:64098): pid=268237 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636B726E70616C746364627361617262746A7172686B6A6F696D7764716B716A203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343938322E383331313832322D313132302D3136383732373933393136363139352F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014983.144:64099): pid=268237 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014983.146:64100): pid=268237 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014983.370:64101): pid=268237 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014983.370:64102): pid=268237 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014983.374:64103): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014983.375:64104): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014983.448:64105): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014983.448:64106): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014983.450:64107): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268242 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014983.610:64108): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014983.610:64109): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014983.666:64110): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014983.666:64111): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014983.667:64112): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268258 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014983.699:64113): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014983.699:64114): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014983.713:64115): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014983.713:64116): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014983.715:64117): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268275 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014983.771:64118): pid=268294 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014983.772:64119): pid=268294 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76756A617A6A726C6773717A6F726575657463676667686A77657A6D70686472203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343938322E383331313832322D313132302D3136383732373933393136363139352F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014983.772:64120): pid=268294 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014983.775:64121): pid=268294 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014983.962:64122): pid=268294 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014983.963:64123): pid=268294 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014983.967:64124): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014983.967:64125): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014983.990:64126): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014983.990:64127): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014983.992:64128): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268297 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014984.022:64129): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014984.022:64130): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014984.145:64131): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014984.145:64132): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014984.147:64133): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268314 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014984.179:64134): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014984.179:64135): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014984.192:64136): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014984.192:64137): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014984.194:64138): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268330 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014984.226:64139): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014984.227:64140): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014984.249:64141): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014984.249:64142): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014984.250:64143): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268352 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014984.295:64144): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014984.295:64145): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014984.306:64146): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014984.306:64147): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014984.308:64148): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268368 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014984.339:64149): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014984.339:64150): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014984.353:64151): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014984.353:64152): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014984.355:64153): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268385 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014984.422:64154): pid=268404 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014984.423:64155): pid=268404 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656166647263636B727A6F776175787A647365647068797372696E6D6F6A6F63203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343938342E3138303530352D313135362D3138373335323136303838303435332F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014984.423:64156): pid=268404 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014984.426:64157): pid=268404 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014984.656:64158): pid=268404 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014984.656:64159): pid=268404 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014984.660:64160): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014984.660:64161): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014984.678:64162): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014984.678:64163): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014984.680:64164): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268407 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014984.713:64165): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014984.713:64166): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014984.884:64167): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014984.885:64168): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014984.886:64169): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268424 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014984.921:64170): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014984.922:64171): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014984.935:64172): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014984.936:64173): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014984.937:64174): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268440 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014984.977:64175): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014984.977:64176): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014985.008:64177): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014985.008:64178): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014985.010:64179): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268462 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014985.076:64180): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014985.077:64181): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014985.090:64182): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014985.090:64183): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014985.092:64184): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268478 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014985.129:64185): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014985.129:64186): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014985.146:64187): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014985.146:64188): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014985.148:64189): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268495 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014985.224:64190): pid=268514 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014985.225:64191): pid=268514 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696C75726270636D78697568656E72787A706E6E6A75686A69737870736D746C203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343938342E393233333336332D313138302D3136343631343931353332363536322F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014985.225:64192): pid=268514 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014985.228:64193): pid=268514 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014985.444:64194): pid=268514 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014985.445:64195): pid=268514 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014985.449:64196): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014985.449:64197): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014985.499:64198): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014985.499:64199): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014985.501:64200): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268519 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014985.565:64201): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014985.566:64202): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014985.583:64203): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014985.583:64204): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014985.585:64205): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268535 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014985.615:64206): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014985.615:64207): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014985.632:64208): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014985.632:64209): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014985.633:64210): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268552 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014985.693:64211): pid=268571 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014985.694:64212): pid=268571 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7570616C7A66756D68736C746D616674616F6274646A74707A6B6B716C6F776E203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343938342E393233333336332D313138302D3136343631343931353332363536322F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014985.694:64213): pid=268571 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014985.697:64214): pid=268571 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014985.936:64215): pid=268571 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014985.936:64216): pid=268571 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014985.939:64217): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014985.940:64218): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014985.953:64219): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014985.953:64220): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014985.954:64221): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268574 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014985.992:64222): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014985.992:64223): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014986.396:64224): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014986.396:64225): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014986.397:64226): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268591 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014986.431:64227): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014986.431:64228): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014986.443:64229): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014986.443:64230): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014986.444:64231): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268607 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014986.485:64232): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014986.485:64233): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014986.695:64234): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014986.695:64235): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014986.695:64236): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268629 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014986.758:64237): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014986.758:64238): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014986.768:64239): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014986.768:64240): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014986.771:64241): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268645 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014986.809:64242): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014986.809:64243): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014986.822:64244): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014986.822:64245): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014986.824:64246): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268662 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014986.896:64247): pid=268681 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014986.896:64248): pid=268681 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D647566727174636473786763667666756D68676A7167657A736865737066626E203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343938362E3433333233372D313232332D3134363836323830353739353231332F416E736962616C6C5A5F636F6E7461696E65725F636F6E6669675F646174612E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014986.897:64249): pid=268681 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014986.900:64250): pid=268681 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014987.135:64251): pid=268681 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014987.135:64252): pid=268681 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014987.139:64253): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014987.139:64254): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014987.164:64255): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014987.164:64256): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014987.166:64257): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268684 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014987.200:64258): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014987.200:64259): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014987.474:64260): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014987.474:64261): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014987.476:64262): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268701 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014987.509:64263): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014987.509:64264): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014987.534:64265): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014987.534:64266): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014987.535:64267): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268717 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014987.575:64268): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014987.575:64269): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014987.719:64270): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014987.719:64271): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014987.721:64272): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268739 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014987.780:64273): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014987.780:64274): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014987.791:64275): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014987.791:64276): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014987.793:64277): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268755 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014987.828:64278): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014987.828:64279): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014987.844:64280): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014987.844:64281): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014987.845:64282): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268772 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014987.916:64283): pid=268791 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014987.916:64284): pid=268791 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766A787673686E77687A6B61686C6666766E766D65677A6A7A727A7476716F77203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343938372E3531323236352D313235302D3235393330383239323934393230302F416E736962616C6C5A5F636F6E7461696E65725F636F6E6669675F686173682E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014987.917:64285): pid=268791 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014987.919:64286): pid=268791 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014988.147:64287): pid=268791 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014988.147:64288): pid=268791 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014988.150:64289): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014988.150:64290): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014988.177:64291): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014988.178:64292): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014988.179:64293): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268794 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014988.212:64294): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014988.212:64295): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014988.529:64296): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014988.529:64297): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014988.531:64298): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268811 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014988.558:64299): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014988.559:64300): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014988.573:64301): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014988.573:64302): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014988.575:64303): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268827 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014988.612:64304): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014988.613:64305): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014988.776:64306): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014988.776:64307): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014988.778:64308): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268849 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014988.832:64309): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014988.832:64310): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014988.847:64311): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014988.847:64312): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014988.849:64313): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268865 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014988.882:64314): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014988.882:64315): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014988.894:64316): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014988.894:64317): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014988.896:64318): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268882 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014988.961:64319): pid=268901 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014988.961:64320): pid=268901 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7275787A6B7966616764746E6D72786C636A69716B6673626C6D6E6B6F70796E203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343938382E3536313232392D313237372D3236323233343335383932363534302F416E736962616C6C5A5F706F646D616E5F636F6E7461696E65725F696E666F2E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014988.962:64321): pid=268901 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014988.964:64322): pid=268901 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014989.603:64323): pid=268901 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014989.603:64324): pid=268901 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014989.607:64325): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014989.607:64326): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014989.654:64327): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014989.655:64328): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014989.656:64329): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268930 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014989.691:64330): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014989.691:64331): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1765014991.471:64332): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014991.658:64333): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765014993.066:64334): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014993.066:64335): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014993.067:64336): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268964 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014993.099:64337): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014993.099:64338): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014993.112:64339): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014993.112:64340): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014993.114:64341): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=268980 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014993.150:64342): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014993.150:64343): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014993.357:64344): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014993.357:64345): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014993.359:64346): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269002 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014993.430:64347): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014993.430:64348): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014993.448:64349): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014993.448:64350): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014993.449:64351): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269018 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014993.481:64352): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014993.481:64353): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014993.492:64354): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014993.492:64355): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014993.494:64356): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269035 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014993.554:64357): pid=269054 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014993.554:64358): pid=269054 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E7162796A74617169637A63737072657171646371756179637A7A6F6C6F6575203B202F7573722F62696E2F707974686F6E33202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343939332E3130323032362D313331352D353230353435303230383632392F416E736962616C6C5A5F6564706D5F636F6E7461696E65725F6D616E6167652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014993.555:64359): pid=269054 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014993.559:64360): pid=269054 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014994.216:64361): pid=269054 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014994.216:64362): pid=269054 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014994.221:64363): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014994.221:64364): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014994.245:64365): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014994.245:64366): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014994.247:64367): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269120 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014994.280:64368): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014994.281:64369): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014994.452:64370): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014994.453:64371): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014994.454:64372): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269137 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014994.487:64373): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014994.487:64374): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014994.509:64375): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014994.509:64376): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014994.510:64377): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269153 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014994.547:64378): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014994.548:64379): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014994.579:64380): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014994.579:64381): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014994.581:64382): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269175 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014994.628:64383): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014994.628:64384): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014994.644:64385): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014994.644:64386): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014994.645:64387): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269191 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014994.680:64388): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014994.680:64389): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014994.893:64390): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014994.893:64391): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014994.895:64392): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269208 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014994.960:64393): pid=269227 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014994.960:64394): pid=269227 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766D6D6A6C6B6D6C7979706B7072796D6A6870727261756A66696D7A78706765203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343939342E343931333533352D313334302D31363333343632323337383336322F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014994.961:64395): pid=269227 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014994.964:64396): pid=269227 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014995.193:64397): pid=269227 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014995.193:64398): pid=269227 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014995.196:64399): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014995.197:64400): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014995.219:64401): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014995.219:64402): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014995.220:64403): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269232 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014995.252:64404): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014995.252:64405): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014995.541:64406): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014995.541:64407): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014995.542:64408): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269249 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014995.575:64409): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014995.575:64410): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014995.592:64411): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014995.592:64412): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014995.593:64413): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269265 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014995.634:64414): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014995.634:64415): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014995.669:64416): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014995.669:64417): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014995.671:64418): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269287 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014995.726:64419): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014995.727:64420): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014995.747:64421): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014995.748:64422): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014995.749:64423): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269303 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014995.790:64424): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014995.790:64425): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014995.809:64426): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014995.809:64427): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014995.810:64428): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269320 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014995.877:64429): pid=269339 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014995.877:64430): pid=269339 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75796A726E7374686D6F78767566657273796C64716E636B68736F7A72786976203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343939352E353737313630312D313336362D3235383430323539323534393835352F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014995.878:64431): pid=269339 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014995.881:64432): pid=269339 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014996.098:64433): pid=269339 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014996.099:64434): pid=269339 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014996.103:64435): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014996.103:64436): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014996.136:64437): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014996.136:64438): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014996.137:64439): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269342 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014996.200:64440): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014996.200:64441): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1765014996.203:64442): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765014996.206:64443): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765014996.219:64444): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014996.219:64445): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014996.220:64446): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269369 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014996.256:64447): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014996.256:64448): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014996.271:64449): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014996.271:64450): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014996.272:64451): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269399 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014996.326:64452): pid=269425 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014996.326:64453): pid=269425 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F75716C69666F7566716B64766E657262776778756F626A68736576676A6477203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343939352E353737313630312D313336362D3235383430323539323534393835352F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014996.327:64454): pid=269425 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014996.329:64455): pid=269425 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_STOP msg=audit(1765014996.334:64456): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014996.424:64457): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014996.528:64458): pid=269425 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014996.529:64459): pid=269425 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014996.532:64460): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014996.532:64461): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014996.558:64462): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014996.558:64463): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014996.559:64464): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269437 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014996.592:64465): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014996.592:64466): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014996.614:64467): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014996.614:64468): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014996.650:64469): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269453 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014996.687:64470): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014996.687:64471): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014996.844:64472): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014996.844:64473): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014996.845:64474): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269475 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014996.883:64475): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014996.883:64476): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014996.989:64477): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014996.989:64478): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014996.990:64479): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269491 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014997.054:64480): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014997.055:64481): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014997.071:64482): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014997.071:64483): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014997.072:64484): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269507 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014997.106:64485): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014997.106:64486): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014997.119:64487): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014997.119:64488): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014997.120:64489): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269524 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014997.188:64490): pid=269543 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014997.189:64491): pid=269543 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726D65646A6D706E6B6562637A71786B736E766D63656365636A637166616761203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343939362E353935303838352D313336362D3235363130393636343230323934392F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014997.189:64492): pid=269543 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014997.192:64493): pid=269543 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014997.402:64494): pid=269543 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014997.403:64495): pid=269543 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014997.407:64496): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014997.407:64497): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014997.522:64498): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014997.522:64499): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014997.524:64500): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269546 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014997.621:64501): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014997.622:64502): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014997.651:64503): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014997.651:64504): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014997.652:64505): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269562 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014997.687:64506): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014997.687:64507): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014997.701:64508): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014997.701:64509): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014997.703:64510): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269579 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765014997.764:64511): pid=269598 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765014997.765:64512): pid=269598 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70636B776E7978656E6A74727378646469726966646A78636A6775696B717776203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031343939362E353935303838352D313336362D3235363130393636343230323934392F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765014997.765:64513): pid=269598 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765014997.768:64514): pid=269598 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_LOGIN msg=audit(1765014997.991:64515): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014997.991:64516): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765014998.051:64517): pid=269601 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014998.051:64518): pid=269601 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014998.051:64519): pid=269601 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014998.054:64520): pid=269601 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014998.057:64521): pid=269601 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014998.057:64522): pid=269601 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014998.064:64523): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014998.064:64524): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014998.089:64525): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014998.089:64526): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765014998.126:64527): pid=269598 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765014998.126:64528): pid=269598 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765014998.130:64529): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014998.130:64530): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765014998.143:64531): pid=269621 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014998.143:64532): pid=269621 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765014998.144:64533): pid=269621 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765014998.147:64534): pid=269621 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_LOGIN msg=audit(1765014998.149:64535): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014998.149:64536): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014998.151:64537): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269639 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014998.183:64538): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014998.183:64539): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1765014998.472:64540): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765014998.565:64541): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765014998.766:64542): pid=269621 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014998.767:64543): pid=269621 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014998.810:64544): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014998.810:64545): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765014999.420:64546): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014999.420:64547): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014999.421:64548): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269707 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014999.454:64549): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014999.454:64550): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014999.472:64551): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014999.472:64552): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014999.474:64553): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269723 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014999.514:64554): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014999.514:64555): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014999.551:64556): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014999.551:64557): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014999.553:64558): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269745 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_LOGIN msg=audit(1765014999.559:64559): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765014999.559:64560): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765014999.611:64561): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014999.611:64562): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765014999.625:64563): pid=269749 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765014999.626:64564): pid=269749 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_LOGIN msg=audit(1765014999.626:64565): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014999.626:64566): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRED_REFR msg=audit(1765014999.626:64567): pid=269749 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765014999.627:64568): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269778 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_START msg=audit(1765014999.631:64569): pid=269749 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014999.635:64570): pid=269749 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765014999.635:64571): pid=269749 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765014999.638:64572): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765014999.638:64573): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765014999.661:64574): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014999.661:64575): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014999.684:64576): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014999.684:64577): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014999.686:64578): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269796 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014999.929:64579): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014999.929:64580): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765014999.943:64581): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765014999.943:64582): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765014999.945:64583): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269816 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765014999.978:64584): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765014999.979:64585): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015000.242:64586): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015000.242:64587): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015000.244:64588): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269833 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015000.279:64589): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015000.279:64590): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015000.292:64591): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015000.292:64592): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015000.293:64593): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269849 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015000.332:64594): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015000.333:64595): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015000.354:64596): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015000.355:64597): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015000.356:64598): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269871 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015000.405:64599): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015000.405:64600): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015000.421:64601): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015000.421:64602): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015000.422:64603): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269887 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015000.450:64604): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015000.451:64605): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015000.461:64606): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015000.461:64607): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015000.463:64608): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269904 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015000.526:64609): pid=269923 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015000.527:64610): pid=269923 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666872686F616966657277746C6A6B736E6F6E61686F686A7179696D78636678203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353030302E323830353534382D313436392D38313932323134363633303433352F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015000.527:64611): pid=269923 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015000.530:64612): pid=269923 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015000.740:64613): pid=269923 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015000.741:64614): pid=269923 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015000.744:64615): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015000.744:64616): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015000.764:64617): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015000.765:64618): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015000.766:64619): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269926 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015000.796:64620): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015000.796:64621): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015001.480:64622): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015001.480:64623): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015001.481:64624): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269943 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015001.514:64625): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015001.514:64626): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015001.524:64627): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015001.524:64628): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015001.525:64629): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269959 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015001.558:64630): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015001.559:64631): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015001.581:64632): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015001.581:64633): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015001.582:64634): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269981 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015001.632:64635): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015001.632:64636): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015001.647:64637): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015001.647:64638): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015001.648:64639): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=269997 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015001.715:64640): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015001.715:64641): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015001.726:64642): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015001.726:64643): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015001.727:64644): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270014 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015001.780:64645): pid=270033 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015001.780:64646): pid=270033 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687367767065736E7269636F646C756D73656176686279746D7A7765766E7371203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353030312E353135393139342D313530352D3237363036323237323238353939362F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015001.780:64647): pid=270033 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015001.782:64648): pid=270033 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015001.982:64649): pid=270033 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015001.983:64650): pid=270033 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015001.987:64651): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015001.987:64652): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015002.000:64653): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015002.000:64654): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015002.001:64655): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270036 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015002.032:64656): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015002.033:64657): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015002.178:64658): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015002.178:64659): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015002.179:64660): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270053 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015002.211:64661): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015002.211:64662): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015002.231:64663): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015002.231:64664): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015002.232:64665): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270069 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015002.271:64666): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015002.271:64667): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015002.314:64668): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015002.314:64669): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015002.316:64670): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270091 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015002.378:64671): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015002.378:64672): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015002.399:64673): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015002.399:64674): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015002.401:64675): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270107 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015002.437:64676): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015002.437:64677): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015002.459:64678): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015002.459:64679): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015002.461:64680): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270124 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015002.521:64681): pid=270143 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015002.522:64682): pid=270143 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78707061747270627177657A7978777371786174736E777162626B6D726F7065203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353030322E3231333133392D313532392D3134313536333339383030363838332F416E736962616C6C5A5F6D6F6470726F62652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015002.522:64683): pid=270143 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015002.525:64684): pid=270143 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015002.748:64685): pid=270143 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015002.748:64686): pid=270143 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015002.751:64687): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015002.751:64688): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015002.904:64689): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015002.904:64690): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015002.905:64691): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270146 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015002.935:64692): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015002.936:64693): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015003.037:64694): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015003.037:64695): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015003.038:64696): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270163 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015003.068:64697): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015003.068:64698): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015003.080:64699): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015003.081:64700): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015003.082:64701): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270179 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015003.121:64702): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015003.121:64703): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015003.156:64704): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015003.157:64705): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015003.158:64706): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270201 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015003.204:64707): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015003.205:64708): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015003.220:64709): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015003.220:64710): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015003.221:64711): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270217 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015003.253:64712): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015003.253:64713): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015003.267:64714): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015003.267:64715): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015003.268:64716): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270234 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015003.332:64717): pid=270253 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015003.333:64718): pid=270253 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7565646D676D726A6F647A707771686165676B7171657268666C716F78706F70203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353030332E303730353533382D313535332D37353832333133393536303932342F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015003.333:64719): pid=270253 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015003.336:64720): pid=270253 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015003.559:64721): pid=270253 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015003.559:64722): pid=270253 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015003.563:64723): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015003.563:64724): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015003.599:64725): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015003.599:64726): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015003.601:64727): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270258 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015003.654:64728): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015003.654:64729): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015003.672:64730): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015003.672:64731): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015003.673:64732): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270274 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015003.701:64733): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015003.702:64734): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015003.721:64735): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015003.721:64736): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015003.723:64737): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270291 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015003.787:64738): pid=270310 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015003.787:64739): pid=270310 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706A67656D6E6170746D727177617470716A6A6C736771717A61627171716C61203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353030332E303730353533382D313535332D37353832333133393536303932342F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015003.788:64740): pid=270310 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015003.799:64741): pid=270310 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1765015003.800:64742): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015003.919:64743): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015004.031:64744): pid=270310 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015004.032:64745): pid=270310 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015004.036:64746): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015004.036:64747): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015004.048:64748): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015004.048:64749): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015004.050:64750): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270331 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015004.083:64751): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015004.084:64752): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015004.328:64753): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015004.328:64754): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015004.329:64755): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270348 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015004.361:64756): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015004.361:64757): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015004.371:64758): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015004.372:64759): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015004.373:64760): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270364 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015004.415:64761): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015004.415:64762): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015004.435:64763): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015004.435:64764): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015004.436:64765): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270386 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015004.502:64766): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015004.503:64767): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015004.514:64768): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015004.515:64769): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015004.516:64770): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270402 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015004.547:64771): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015004.547:64772): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015004.562:64773): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015004.563:64774): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015004.564:64775): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270419 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015004.625:64776): pid=270438 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015004.626:64777): pid=270438 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73756C6E6F6F64656362706C7576786D6F6570706A6A706D78766F687A64747A203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353030342E333632393838352D313539322D3137303132373934383735383538332F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015004.627:64778): pid=270438 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015004.630:64779): pid=270438 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015004.872:64780): pid=270438 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015004.872:64781): pid=270438 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015004.877:64782): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015004.877:64783): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015004.901:64784): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015004.901:64785): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015004.903:64786): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270441 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015004.934:64787): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015004.934:64788): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015005.210:64789): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015005.210:64790): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015005.212:64791): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270458 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015005.239:64792): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015005.240:64793): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015005.256:64794): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015005.256:64795): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015005.257:64796): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270474 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015005.292:64797): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015005.292:64798): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015005.329:64799): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015005.329:64800): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015005.331:64801): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270496 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015005.387:64802): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015005.387:64803): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015005.412:64804): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015005.412:64805): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015005.413:64806): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270512 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015005.443:64807): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015005.443:64808): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015005.468:64809): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015005.468:64810): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015005.470:64811): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270529 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015005.533:64812): pid=270548 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015005.533:64813): pid=270548 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F7265706E7A6D69746464676B766C72717264686574616666717964706C756D203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353030352E323432303233352D313631382D3234353931383939323531392F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015005.535:64814): pid=270548 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015005.537:64815): pid=270548 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1765015006.474:64816): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015006.592:64817): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015008.859:64818): pid=270548 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015008.859:64819): pid=270548 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015008.863:64820): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015008.863:64821): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015008.882:64822): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015008.882:64823): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015008.884:64824): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270576 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015008.915:64825): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015008.916:64826): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015009.505:64827): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015009.506:64828): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015009.507:64829): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270593 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015009.539:64830): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015009.539:64831): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015009.559:64832): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015009.559:64833): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015009.561:64834): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270609 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015009.602:64835): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015009.603:64836): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015009.635:64837): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015009.635:64838): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015009.636:64839): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270631 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015009.700:64840): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015009.700:64841): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015009.720:64842): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015009.720:64843): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015009.722:64844): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270647 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015009.755:64845): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015009.756:64846): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015009.773:64847): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015009.773:64848): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015009.775:64849): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270664 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015010.429:64850): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015010.429:64851): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015010.456:64852): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015010.456:64853): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015010.458:64854): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270688 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=SERVICE_START msg=audit(1765015010.472:64855): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015010.493:64856): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015010.493:64857): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_STOP msg=audit(1765015010.617:64858): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015010.747:64859): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015010.747:64860): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015010.748:64861): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270730 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015010.783:64862): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015010.783:64863): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015010.797:64864): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015010.797:64865): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015010.798:64866): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270746 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015010.838:64867): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015010.838:64868): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015010.873:64869): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015010.873:64870): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015010.875:64871): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270768 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015010.937:64872): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015010.937:64873): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015010.964:64874): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015010.964:64875): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015010.965:64876): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270784 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015010.995:64877): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015010.995:64878): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015011.011:64879): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015011.011:64880): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015011.012:64881): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270801 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015011.069:64882): pid=270820 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015011.069:64883): pid=270820 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656E766A756A7175636F7A69676C75627A776F61786D687871746B637A6D697A203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353031302E373834373234322D313637302D3234383230353030393938383432392F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015011.070:64884): pid=270820 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015011.073:64885): pid=270820 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015011.274:64886): pid=270820 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015011.274:64887): pid=270820 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015011.278:64888): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015011.278:64889): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015011.300:64890): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015011.300:64891): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015011.301:64892): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270823 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015011.329:64893): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015011.329:64894): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015011.815:64895): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015011.815:64896): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015011.817:64897): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270840 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015011.848:64898): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015011.848:64899): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015011.859:64900): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015011.859:64901): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015011.860:64902): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270856 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015011.898:64903): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015011.898:64904): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015011.929:64905): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015011.929:64906): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015011.930:64907): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270878 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015012.008:64908): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015012.008:64909): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015012.019:64910): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015012.019:64911): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015012.020:64912): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270894 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015012.054:64913): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015012.054:64914): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015012.067:64915): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015012.067:64916): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015012.069:64917): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270911 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015012.138:64918): pid=270930 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015012.139:64919): pid=270930 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6370617778667975676E6A747270656D756470666D7071796E61696A72786C203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353031312E3835303838372D313730342D38313437373436343832303732362F416E736962616C6C5A5F73797374656D645F736572766963652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015012.139:64920): pid=270930 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015012.142:64921): pid=270930 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=BPF msg=audit(1765015012.788:64922): prog-id=2041 op=LOAD
type=BPF msg=audit(1765015012.788:64923): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015012.792:64924): prog-id=2042 op=LOAD
type=BPF msg=audit(1765015012.792:64925): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015012.796:64926): prog-id=2043 op=LOAD
type=BPF msg=audit(1765015012.796:64927): prog-id=2044 op=LOAD
type=BPF msg=audit(1765015012.796:64928): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015012.796:64929): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015012.797:64930): prog-id=2045 op=LOAD
type=BPF msg=audit(1765015012.797:64931): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015012.798:64932): prog-id=2046 op=LOAD
type=BPF msg=audit(1765015012.798:64933): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015012.798:64934): prog-id=2047 op=LOAD
type=BPF msg=audit(1765015012.798:64935): prog-id=2048 op=LOAD
type=BPF msg=audit(1765015012.798:64936): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015012.798:64937): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015012.799:64938): prog-id=2049 op=LOAD
type=BPF msg=audit(1765015012.799:64939): prog-id=2050 op=LOAD
type=BPF msg=audit(1765015012.799:64940): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015012.799:64941): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015012.800:64942): prog-id=2051 op=LOAD
type=BPF msg=audit(1765015012.800:64943): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015012.800:64944): prog-id=2052 op=LOAD
type=BPF msg=audit(1765015012.801:64945): prog-id=2053 op=LOAD
type=BPF msg=audit(1765015012.801:64946): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015012.801:64947): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015012.831:64948): pid=270930 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015012.831:64949): pid=270930 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015012.835:64950): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015012.835:64951): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015012.863:64952): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015012.863:64953): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015012.865:64954): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270970 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015012.905:64955): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015012.906:64956): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015013.087:64957): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015013.087:64958): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015013.100:64959): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=270987 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015013.127:64960): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015013.127:64961): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015013.147:64962): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015013.147:64963): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015013.148:64964): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271003 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015013.178:64965): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015013.178:64966): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015013.223:64967): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015013.223:64968): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015013.225:64969): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271025 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015013.278:64970): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015013.278:64971): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015013.292:64972): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015013.292:64973): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015013.294:64974): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271041 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015013.326:64975): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015013.327:64976): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015013.342:64977): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015013.342:64978): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015013.344:64979): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271058 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015018.551:64980): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015018.552:64981): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015018.577:64982): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015018.577:64983): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015018.578:64984): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271221 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015018.614:64985): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015018.614:64986): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015019.187:64987): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015019.187:64988): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015019.188:64989): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271238 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015019.219:64990): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015019.219:64991): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015019.232:64992): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015019.232:64993): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015019.234:64994): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271254 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015019.272:64995): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015019.272:64996): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015019.302:64997): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015019.302:64998): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015019.303:64999): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271276 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015019.362:65000): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015019.362:65001): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015019.375:65002): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015019.375:65003): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015019.377:65004): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271292 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015019.408:65005): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015019.408:65006): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015019.419:65007): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015019.419:65008): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015019.421:65009): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271309 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015019.487:65010): pid=271328 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015019.488:65011): pid=271328 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70766A7670616A6462676B6B75697A6F6B796A6A6E656C73756D6E7262637976203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353031392E323231383139392D313736312D39343135353532363935393930332F416E736962616C6C5A5F73797374656D645F736572766963652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015019.489:65012): pid=271328 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015019.493:65013): pid=271328 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015020.834:65014): pid=271328 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015020.834:65015): pid=271328 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015020.837:65016): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015020.837:65017): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015020.850:65018): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015020.850:65019): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015020.851:65020): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271332 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015020.885:65021): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015020.885:65022): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015020.920:65023): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015020.920:65024): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015020.922:65025): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271349 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015020.953:65026): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015020.953:65027): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015020.974:65028): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015020.974:65029): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015020.975:65030): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271365 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015021.011:65031): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015021.011:65032): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015021.050:65033): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015021.050:65034): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015021.052:65035): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271387 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015021.122:65036): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015021.122:65037): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015021.158:65038): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015021.158:65039): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015021.159:65040): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271403 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015021.188:65041): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015021.188:65042): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015021.208:65043): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015021.208:65044): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015021.210:65045): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271420 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015021.277:65046): pid=271439 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015021.278:65047): pid=271439 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A656B7578786B79786D696378677975626676776167686B6567736E74707373203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353032302E393534363739352D313736312D3139363634383235373633343337312F416E736962616C6C5A5F73797374656D645F736572766963652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015021.279:65048): pid=271439 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015021.283:65049): pid=271439 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015021.624:65050): pid=271439 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015021.624:65051): pid=271439 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015021.627:65052): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015021.627:65053): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015021.642:65054): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015021.642:65055): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015021.643:65056): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271443 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015021.669:65057): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015021.669:65058): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015021.717:65059): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015021.717:65060): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015021.718:65061): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271460 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015021.748:65062): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015021.748:65063): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015021.765:65064): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015021.765:65065): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015021.767:65066): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271476 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015021.852:65067): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015021.852:65068): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015021.883:65069): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015021.884:65070): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015021.885:65071): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271498 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015021.971:65072): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015021.971:65073): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015022.009:65074): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015022.009:65075): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015022.010:65076): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271514 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015022.048:65077): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015022.048:65078): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015022.068:65079): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015022.068:65080): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015022.069:65081): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271531 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015022.139:65082): pid=271550 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015022.139:65083): pid=271550 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64686E787478797961776B7664667261706F6E75707276707472626E69646768203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353032312E373530303735382D313736312D3233323332373637303539343730362F416E736962616C6C5A5F73797374656D645F736572766963652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015022.140:65084): pid=271550 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015022.153:65085): pid=271550 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1765015022.154:65086): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015022.253:65087): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015022.471:65088): pid=271550 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015022.471:65089): pid=271550 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015022.474:65090): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015022.474:65091): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015022.495:65092): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015022.495:65093): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015022.496:65094): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271573 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015022.528:65095): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015022.528:65096): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015022.576:65097): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015022.576:65098): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015022.578:65099): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271590 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015022.614:65100): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015022.615:65101): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015022.636:65102): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015022.636:65103): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015022.638:65104): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271606 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015022.679:65105): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015022.679:65106): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015022.722:65107): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015022.722:65108): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015022.724:65109): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271628 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015022.804:65110): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015022.804:65111): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015022.828:65112): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015022.828:65113): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015022.829:65114): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271644 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015022.866:65115): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015022.867:65116): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015022.887:65117): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015022.888:65118): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015022.889:65119): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271661 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015022.964:65120): pid=271680 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015022.964:65121): pid=271680 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6378736F737865647977727A6B727A7162676A657678787178687A7376616E203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353032322E363136363731332D313736312D3234353934393831373936323432352F416E736962616C6C5A5F73797374656D645F736572766963652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015022.965:65122): pid=271680 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015022.969:65123): pid=271680 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015023.397:65124): pid=271680 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015023.397:65125): pid=271680 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015023.399:65126): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015023.400:65127): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015023.424:65128): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015023.425:65129): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015023.426:65130): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271684 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015023.459:65131): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015023.459:65132): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015023.505:65133): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015023.505:65134): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015023.507:65135): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271701 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015023.536:65136): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015023.536:65137): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015023.556:65138): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015023.556:65139): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015023.557:65140): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271717 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015023.594:65141): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015023.594:65142): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015023.633:65143): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015023.634:65144): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015023.635:65145): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271739 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015023.716:65146): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015023.716:65147): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015023.732:65148): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015023.733:65149): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015023.734:65150): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271755 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015023.767:65151): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015023.767:65152): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015023.788:65153): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015023.788:65154): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015023.790:65155): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271772 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015023.848:65156): pid=271791 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015023.849:65157): pid=271791 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D637978656C70646A7177756F63707A716E796661656D696875616C6765736365203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353032332E353338363632372D313736312D33333631363633323337323637392F416E736962616C6C5A5F73797374656D645F736572766963652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015023.849:65158): pid=271791 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015023.853:65159): pid=271791 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015024.159:65160): pid=271791 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015024.160:65161): pid=271791 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015024.162:65162): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015024.163:65163): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015024.176:65164): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015024.176:65165): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015024.177:65166): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271795 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015024.208:65167): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015024.208:65168): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015024.233:65169): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015024.233:65170): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015024.235:65171): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271812 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015024.267:65172): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015024.267:65173): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015024.277:65174): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015024.277:65175): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015024.279:65176): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271828 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015024.313:65177): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015024.313:65178): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015024.354:65179): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015024.354:65180): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015024.356:65181): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271850 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015024.419:65182): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015024.420:65183): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015024.437:65184): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015024.437:65185): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015024.439:65186): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271866 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015024.470:65187): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015024.470:65188): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015024.483:65189): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015024.483:65190): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015024.485:65191): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271883 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015024.544:65192): pid=271902 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015024.544:65193): pid=271902 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62726C7179776268746B6368686E617277707562646E64726D706E6F6676666B203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353032342E323639313339382D313736312D32363834333438373731343638302F416E736962616C6C5A5F73797374656D645F736572766963652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015024.544:65194): pid=271902 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015024.546:65195): pid=271902 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015024.928:65196): pid=271902 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015024.929:65197): pid=271902 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015024.931:65198): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015024.932:65199): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015024.956:65200): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015024.956:65201): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015024.957:65202): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271906 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015024.996:65203): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015024.996:65204): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015025.048:65205): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015025.048:65206): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015025.050:65207): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271923 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015025.085:65208): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015025.086:65209): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015025.105:65210): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015025.106:65211): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015025.107:65212): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271939 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015025.147:65213): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015025.148:65214): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015025.181:65215): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015025.182:65216): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015025.183:65217): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271961 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015025.254:65218): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015025.255:65219): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015025.269:65220): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015025.269:65221): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015025.271:65222): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271977 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015025.306:65223): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015025.307:65224): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015025.326:65225): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015025.326:65226): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015025.327:65227): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=271994 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015025.395:65228): pid=272013 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015025.395:65229): pid=272013 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A7A73716B6A666A686B796B796D6C78626F71646E72616873746E7A77777768203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353032352E303837373832342D313736312D38303335303136373836333137342F416E736962616C6C5A5F73797374656D645F736572766963652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015025.395:65230): pid=272013 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015025.398:65231): pid=272013 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015025.726:65232): pid=272013 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015025.727:65233): pid=272013 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015025.729:65234): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015025.729:65235): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015025.752:65236): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015025.752:65237): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015025.753:65238): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272017 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015025.782:65239): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015025.782:65240): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015025.826:65241): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015025.826:65242): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015025.826:65243): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272034 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015025.853:65244): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015025.854:65245): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015025.870:65246): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015025.870:65247): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015025.871:65248): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272050 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015025.905:65249): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015025.906:65250): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015025.939:65251): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015025.939:65252): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015025.940:65253): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272072 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015026.018:65254): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015026.018:65255): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015026.039:65256): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015026.039:65257): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015026.041:65258): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272088 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015026.071:65259): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015026.071:65260): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015026.084:65261): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015026.084:65262): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015026.085:65263): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272105 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015026.148:65264): pid=272124 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015026.148:65265): pid=272124 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6762696462667375667861756B76727170726766796C73796F6E74616C70736C203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353032352E383537323838312D313736312D3231393431303039303935383735392F416E736962616C6C5A5F73797374656D645F736572766963652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015026.148:65266): pid=272124 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015026.150:65267): pid=272124 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1765015026.476:65268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015026.478:65269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015026.508:65270): pid=272124 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015026.508:65271): pid=272124 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015026.511:65272): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015026.511:65273): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015026.533:65274): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015026.533:65275): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015026.534:65276): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272150 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015026.559:65277): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015026.559:65278): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_STOP msg=audit(1765015026.622:65279): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015026.673:65280): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015026.888:65281): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015026.888:65282): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015026.889:65283): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272187 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015026.920:65284): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015026.920:65285): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015026.931:65286): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015026.931:65287): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015026.933:65288): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272203 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015026.971:65289): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015026.971:65290): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015026.994:65291): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015026.994:65292): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015026.995:65293): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272225 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015027.048:65294): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015027.048:65295): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015027.061:65296): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015027.061:65297): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015027.062:65298): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272241 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015027.096:65299): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015027.096:65300): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015027.122:65301): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015027.123:65302): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015027.124:65303): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272258 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015027.191:65304): pid=272277 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015027.191:65305): pid=272277 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7566707A746A6A776B6C6A6E786F796E646B66766B6D636D6471746374697476203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353032362E3932333137322D313933372D3130303637373237353538323035362F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015027.192:65306): pid=272277 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015027.197:65307): pid=272277 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015027.423:65308): pid=272277 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015027.424:65309): pid=272277 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015027.427:65310): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015027.427:65311): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015027.447:65312): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015027.447:65313): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015027.448:65314): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272280 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015027.479:65315): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015027.479:65316): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015027.522:65317): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015027.522:65318): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015027.523:65319): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272297 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015027.548:65320): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015027.548:65321): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015027.560:65322): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015027.560:65323): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015027.561:65324): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272313 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015027.591:65325): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015027.592:65326): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015027.624:65327): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015027.624:65328): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015027.626:65329): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272335 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015027.677:65330): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015027.678:65331): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015027.702:65332): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015027.702:65333): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015027.703:65334): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272351 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015027.734:65335): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015027.734:65336): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015027.752:65337): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015027.752:65338): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015027.753:65339): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272368 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015027.818:65340): pid=272387 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015027.818:65341): pid=272387 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D62706274797971656D726B6D6276707A78697A677A737162746461786D6479203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353032372E353530363539372D313933372D3232313139313234323832313738332F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015027.820:65342): pid=272387 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015027.823:65343): pid=272387 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015028.034:65344): pid=272387 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015028.035:65345): pid=272387 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015028.038:65346): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015028.039:65347): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015028.053:65348): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015028.053:65349): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015028.054:65350): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272391 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015028.089:65351): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015028.089:65352): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015028.111:65353): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015028.111:65354): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015028.113:65355): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272408 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015028.144:65356): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015028.145:65357): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015028.164:65358): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015028.164:65359): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015028.165:65360): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272424 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015028.203:65361): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015028.204:65362): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015028.226:65363): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015028.226:65364): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015028.227:65365): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272446 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015028.276:65366): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015028.276:65367): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015028.298:65368): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015028.298:65369): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015028.299:65370): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272462 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015028.325:65371): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015028.325:65372): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015028.349:65373): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015028.349:65374): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015028.350:65375): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272479 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015028.406:65376): pid=272498 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015028.406:65377): pid=272498 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B7966676D656F777A7772647174776869657A726664676E61627A6E70626561203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353032382E313438373633372D313933372D3237373932333139383532343634322F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015028.406:65378): pid=272498 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015028.408:65379): pid=272498 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015028.610:65380): pid=272498 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015028.611:65381): pid=272498 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015028.615:65382): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015028.615:65383): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015028.634:65384): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015028.634:65385): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015028.636:65386): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272501 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015028.666:65387): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015028.666:65388): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015028.706:65389): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015028.706:65390): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015028.707:65391): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272518 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015028.735:65392): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015028.735:65393): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015028.755:65394): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015028.755:65395): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015028.756:65396): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272534 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015028.789:65397): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015028.789:65398): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015028.818:65399): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015028.818:65400): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015028.819:65401): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272556 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015028.870:65402): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015028.870:65403): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015028.891:65404): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015028.891:65405): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015028.892:65406): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272572 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015028.921:65407): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015028.921:65408): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015028.940:65409): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015028.940:65410): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015028.941:65411): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272589 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015028.999:65412): pid=272608 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015028.999:65413): pid=272608 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7467736D6F656D76786766657075746C61777771656C707768716F6962706D6D203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353032382E373338363735342D313933372D3139323139323638383539343832382F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015029.000:65414): pid=272608 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015029.019:65415): pid=272608 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1765015029.021:65416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015029.126:65417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015029.236:65418): pid=272608 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015029.236:65419): pid=272608 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015029.240:65420): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015029.240:65421): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015029.261:65422): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015029.261:65423): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015029.262:65424): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272630 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015029.299:65425): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015029.299:65426): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015029.344:65427): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015029.344:65428): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015029.346:65429): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272647 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015029.371:65430): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015029.372:65431): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015029.392:65432): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015029.392:65433): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015029.393:65434): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272663 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015029.424:65435): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015029.424:65436): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015029.463:65437): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015029.463:65438): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015029.463:65439): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272685 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015029.511:65440): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015029.511:65441): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015029.529:65442): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015029.529:65443): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015029.530:65444): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272701 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015029.608:65445): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015029.608:65446): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015029.629:65447): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015029.629:65448): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015029.631:65449): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272718 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015029.693:65450): pid=272737 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015029.694:65451): pid=272737 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77707A687771797374627472746C796568707074706C6572737175727974636A203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353032392E333735313534372D313933372D3237303535383332323831343738342F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015029.694:65452): pid=272737 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015029.698:65453): pid=272737 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015029.901:65454): pid=272737 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015029.901:65455): pid=272737 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015029.905:65456): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015029.905:65457): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015029.917:65458): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015029.917:65459): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015029.919:65460): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272740 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015029.951:65461): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015029.951:65462): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015029.990:65463): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015029.990:65464): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015029.990:65465): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272757 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015030.023:65466): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015030.023:65467): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015030.037:65468): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015030.037:65469): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015030.039:65470): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272773 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015030.076:65471): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015030.077:65472): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015030.107:65473): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015030.107:65474): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015030.109:65475): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272795 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015030.171:65476): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015030.171:65477): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015030.186:65478): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015030.186:65479): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015030.187:65480): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272811 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015030.219:65481): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015030.219:65482): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015030.235:65483): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015030.235:65484): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015030.238:65485): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272828 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015030.301:65486): pid=272847 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015030.301:65487): pid=272847 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6479776A62727771687463696D706D7178686668666678726666627869746276203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353033302E303235383539342D313933372D33393239313435393738393539362F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015030.302:65488): pid=272847 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015030.304:65489): pid=272847 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015030.485:65490): pid=272847 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015030.486:65491): pid=272847 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015030.489:65492): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015030.489:65493): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015030.502:65494): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015030.502:65495): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015030.503:65496): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272850 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015030.534:65497): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015030.534:65498): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015030.564:65499): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015030.564:65500): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015030.565:65501): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272867 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015030.596:65502): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015030.596:65503): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015030.614:65504): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015030.614:65505): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015030.615:65506): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272883 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015030.643:65507): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015030.643:65508): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015030.673:65509): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015030.673:65510): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015030.674:65511): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272905 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015030.731:65512): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015030.731:65513): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015030.753:65514): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015030.753:65515): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015030.754:65516): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272921 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015030.784:65517): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015030.784:65518): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015030.805:65519): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015030.805:65520): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015030.806:65521): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272938 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015030.870:65522): pid=272957 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015030.870:65523): pid=272957 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736A6A7163646D677167746B707068616D6A7A6968666168626C73746E786E68203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353033302E353939333339322D313933372D3234383431333531373032383331382F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015030.870:65524): pid=272957 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015030.873:65525): pid=272957 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015031.094:65526): pid=272957 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015031.094:65527): pid=272957 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015031.098:65528): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015031.098:65529): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015031.124:65530): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015031.124:65531): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015031.125:65532): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272980 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015031.150:65533): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015031.150:65534): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015031.213:65535): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015031.213:65536): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015031.214:65537): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=272997 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015031.244:65538): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015031.244:65539): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015031.257:65540): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015031.257:65541): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015031.258:65542): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273013 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015031.293:65543): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015031.294:65544): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015031.316:65545): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015031.316:65546): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015031.317:65547): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273035 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015031.385:65548): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015031.385:65549): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015031.408:65550): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015031.408:65551): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015031.410:65552): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273053 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015031.439:65553): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015031.440:65554): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015031.462:65555): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015031.462:65556): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015031.463:65557): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273070 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015031.525:65558): pid=273089 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015031.526:65559): pid=273089 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65666B72647462757672636176666968617A636878726E6A6D6C73626D687276203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353033312E323436373938382D313933372D3234313131323135343630343133312F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015031.527:65560): pid=273089 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015031.530:65561): pid=273089 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015031.736:65562): pid=273089 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015031.736:65563): pid=273089 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015031.738:65564): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015031.738:65565): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015031.751:65566): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015031.751:65567): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015031.752:65568): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273112 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015031.773:65569): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015031.773:65570): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015032.466:65571): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015032.466:65572): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015032.468:65573): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273131 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015032.498:65574): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015032.498:65575): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015032.516:65576): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015032.517:65577): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015032.518:65578): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273147 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015032.557:65579): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015032.557:65580): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015032.590:65581): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015032.590:65582): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015032.592:65583): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273169 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015032.659:65584): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015032.659:65585): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015032.680:65586): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015032.681:65587): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015032.682:65588): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273185 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015032.713:65589): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015032.713:65590): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015032.731:65591): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015032.731:65592): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015032.732:65593): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273202 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015032.801:65594): pid=273221 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015032.801:65595): pid=273221 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6E7074706F797A61716D63766A766F7A6A65676C62776D767165677169676B203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353033322E353031373938342D323130392D31383438353035373337343534322F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015032.802:65596): pid=273221 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015032.804:65597): pid=273221 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015033.014:65598): pid=273221 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015033.014:65599): pid=273221 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015033.018:65600): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015033.018:65601): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015033.029:65602): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015033.029:65603): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015033.030:65604): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273224 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015033.064:65605): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015033.064:65606): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015033.086:65607): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015033.086:65608): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015033.087:65609): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273241 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015033.119:65610): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015033.119:65611): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015033.140:65612): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015033.140:65613): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015033.141:65614): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273257 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015033.178:65615): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015033.178:65616): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015033.201:65617): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015033.201:65618): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015033.203:65619): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273279 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015033.270:65620): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015033.270:65621): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015033.293:65622): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015033.293:65623): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015033.294:65624): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273295 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015033.327:65625): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015033.328:65626): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015033.361:65627): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015033.361:65628): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015033.363:65629): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273312 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015033.433:65630): pid=273331 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015033.434:65631): pid=273331 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C756E73797A637776796F7A7A72716C7165756376697576696278676D6A6176203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353033332E313233303434352D323130392D35353738373830393631353932392F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015033.434:65632): pid=273331 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015033.437:65633): pid=273331 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015033.642:65634): pid=273331 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015033.643:65635): pid=273331 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015033.647:65636): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015033.647:65637): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015033.661:65638): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015033.661:65639): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015033.662:65640): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273334 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015033.695:65641): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015033.696:65642): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015033.757:65643): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015033.757:65644): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015033.758:65645): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273351 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015033.792:65646): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015033.793:65647): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015033.806:65648): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015033.806:65649): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015033.808:65650): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273367 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015033.846:65651): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015033.847:65652): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015033.893:65653): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015033.893:65654): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015033.895:65655): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273389 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015033.963:65656): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015033.963:65657): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015033.981:65658): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015033.982:65659): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015033.983:65660): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273405 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015034.015:65661): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015034.015:65662): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015034.030:65663): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015034.030:65664): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015034.032:65665): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273422 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015034.099:65666): pid=273441 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015034.099:65667): pid=273441 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6D64756E737464686173786763726F636C66757173756764696F7463727476203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353033332E373936313737362D323130392D32343930383233323033353637352F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015034.100:65668): pid=273441 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015034.115:65669): pid=273441 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1765015034.117:65670): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015034.253:65671): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015034.340:65672): pid=273441 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015034.340:65673): pid=273441 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015034.344:65674): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015034.344:65675): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015034.451:65676): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015034.451:65677): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015034.452:65678): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273463 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015034.483:65679): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015034.483:65680): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015034.511:65681): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015034.511:65682): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015034.512:65683): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273480 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015034.544:65684): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015034.544:65685): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015034.556:65686): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015034.556:65687): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015034.557:65688): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273496 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015034.596:65689): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015034.596:65690): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015034.618:65691): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015034.618:65692): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015034.619:65693): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273518 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015034.670:65694): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015034.670:65695): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015034.684:65696): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015034.684:65697): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015034.685:65698): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273534 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015034.719:65699): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015034.720:65700): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015034.732:65701): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015034.732:65702): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015034.734:65703): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273551 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015034.805:65704): pid=273570 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015034.805:65705): pid=273570 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A776B7A786C7A6F6E6D6579666E6A72656365786B73727071656A6A696F6176203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353033342E353436363034362D323130392D32383231323833343538373834302F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015034.806:65706): pid=273570 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015034.808:65707): pid=273570 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015035.028:65708): pid=273570 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015035.029:65709): pid=273570 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015035.032:65710): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015035.032:65711): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015035.052:65712): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015035.052:65713): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015035.053:65714): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273573 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015035.085:65715): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015035.085:65716): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015035.167:65717): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015035.167:65718): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015035.168:65719): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273590 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015035.201:65720): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015035.201:65721): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015035.216:65722): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015035.216:65723): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015035.217:65724): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273606 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015035.253:65725): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015035.253:65726): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015035.275:65727): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015035.276:65728): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015035.277:65729): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273628 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015035.329:65730): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015035.329:65731): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015035.347:65732): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015035.347:65733): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015035.348:65734): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273644 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015035.382:65735): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015035.382:65736): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015035.408:65737): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015035.408:65738): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015035.410:65739): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273661 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015035.474:65740): pid=273680 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015035.474:65741): pid=273680 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E68746A796D6F7A74667A7868726377706D6967637579666D66726A766D6573203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353033352E323033313632372D323130392D3134303439333630363330393937322F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015035.475:65742): pid=273680 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015035.478:65743): pid=273680 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015035.700:65744): pid=273680 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015035.701:65745): pid=273680 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015035.704:65746): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015035.704:65747): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015035.725:65748): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015035.725:65749): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015035.726:65750): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273683 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015035.756:65751): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015035.756:65752): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015035.808:65753): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015035.808:65754): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015035.809:65755): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273700 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015035.839:65756): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015035.840:65757): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015035.862:65758): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015035.862:65759): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015035.863:65760): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273716 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015035.897:65761): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015035.897:65762): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015035.925:65763): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015035.926:65764): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015035.927:65765): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273738 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015035.987:65766): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015035.987:65767): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015036.013:65768): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015036.013:65769): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015036.015:65770): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273754 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015036.046:65771): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015036.046:65772): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015036.069:65773): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015036.069:65774): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015036.070:65775): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273771 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015036.134:65776): pid=273790 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015036.134:65777): pid=273790 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65776C787668736B736D7A76686166646E747077676C76736E726472696E657A203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353033352E383432373937382D323130392D3138363932313731313939303037352F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015036.135:65778): pid=273790 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015036.137:65779): pid=273790 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015036.350:65780): pid=273790 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015036.350:65781): pid=273790 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015036.354:65782): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015036.354:65783): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015036.383:65784): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015036.383:65785): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015036.384:65786): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273793 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015036.417:65787): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015036.417:65788): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015036.453:65789): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015036.453:65790): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015036.455:65791): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273810 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015036.483:65792): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015036.483:65793): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015036.503:65794): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015036.504:65795): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015036.505:65796): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273826 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015036.536:65797): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015036.536:65798): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015036.575:65799): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015036.575:65800): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015036.576:65801): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273848 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015036.633:65802): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015036.633:65803): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015036.656:65804): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015036.656:65805): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015036.657:65806): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273864 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015036.688:65807): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015036.688:65808): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015036.702:65809): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015036.702:65810): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015036.703:65811): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273881 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015036.759:65812): pid=273900 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015036.759:65813): pid=273900 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77626D636E6C73666F6263627969627163727876687161626D63746A67637466203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353033362E343834393237372D323130392D3236323333353338353735303335372F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015036.760:65814): pid=273900 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015036.764:65815): pid=273900 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1765015036.780:65816): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015036.934:65817): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015036.986:65818): pid=273900 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015036.986:65819): pid=273900 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015036.989:65820): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015036.989:65821): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015037.005:65822): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015037.005:65823): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015037.006:65824): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273924 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015037.030:65825): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015037.030:65826): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015037.062:65827): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015037.062:65828): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015037.063:65829): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273941 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015037.094:65830): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015037.094:65831): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015037.118:65832): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015037.118:65833): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015037.119:65834): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273957 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015037.154:65835): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015037.155:65836): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015037.181:65837): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015037.181:65838): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015037.183:65839): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273979 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015037.238:65840): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015037.238:65841): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015037.254:65842): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015037.254:65843): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015037.256:65844): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=273995 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015037.288:65845): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015037.288:65846): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015037.314:65847): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015037.314:65848): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015037.317:65849): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274012 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015037.377:65850): pid=274031 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015037.378:65851): pid=274031 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73776862777264796C61796E6B6D76736976716E6669776B6A6C716E78767877203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353033372E303936383639352D323130392D3133353934383838313533393037372F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015037.379:65852): pid=274031 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015037.382:65853): pid=274031 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015037.567:65854): pid=274031 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015037.567:65855): pid=274031 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015037.571:65856): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015037.571:65857): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015037.588:65858): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015037.588:65859): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015037.589:65860): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274034 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015037.614:65861): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015037.614:65862): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015038.264:65863): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015038.264:65864): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015038.265:65865): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274051 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015038.300:65866): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015038.300:65867): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015038.313:65868): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015038.313:65869): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015038.314:65870): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274067 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015038.351:65871): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015038.351:65872): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015038.388:65873): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015038.388:65874): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015038.390:65875): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274089 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015038.447:65876): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015038.447:65877): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015038.463:65878): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015038.463:65879): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015038.464:65880): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274105 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015038.497:65881): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015038.497:65882): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015038.511:65883): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015038.511:65884): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015038.512:65885): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274122 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015038.570:65886): pid=274141 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015038.571:65887): pid=274141 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E756A666F6474796A77756571666D72757A6962757165626C79746572687264203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353033382E333031383230352D323238332D3131363831343338323937343736342F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015038.571:65888): pid=274141 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015038.573:65889): pid=274141 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015038.801:65890): pid=274141 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015038.801:65891): pid=274141 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015038.805:65892): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015038.805:65893): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015038.816:65894): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015038.816:65895): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015038.817:65896): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274146 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015038.848:65897): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015038.848:65898): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015038.996:65899): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015038.996:65900): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015038.998:65901): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274163 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015039.028:65902): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015039.028:65903): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015039.041:65904): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015039.041:65905): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015039.042:65906): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274179 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015039.074:65907): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015039.074:65908): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015039.225:65909): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015039.225:65910): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015039.226:65911): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274201 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015039.266:65912): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015039.266:65913): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015039.280:65914): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015039.280:65915): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015039.281:65916): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274217 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015039.313:65917): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015039.313:65918): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015039.332:65919): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015039.332:65920): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015039.334:65921): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274234 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015039.583:65922): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015039.583:65923): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015039.599:65924): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015039.599:65925): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015039.600:65926): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274254 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015039.635:65927): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015039.635:65928): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015039.989:65929): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015039.989:65930): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015039.991:65931): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274271 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015040.023:65932): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015040.023:65933): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015040.037:65934): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015040.037:65935): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015040.038:65936): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274287 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015040.078:65937): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015040.078:65938): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015040.112:65939): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015040.112:65940): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015040.113:65941): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274309 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015040.177:65942): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015040.177:65943): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015040.198:65944): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015040.198:65945): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015040.199:65946): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274325 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015040.232:65947): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015040.232:65948): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015040.246:65949): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015040.246:65950): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015040.247:65951): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274342 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015040.316:65952): pid=274361 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015040.317:65953): pid=274361 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6675626A6675706E7A6662716E78736D7664726A7070786F78756E6170646663203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353034302E303236303536332D323333372D34393234333730393231313538342F416E736962616C6C5A5F73797374656D645F736572766963652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015040.318:65954): pid=274361 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015040.321:65955): pid=274361 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1765015040.643:65956): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015040.913:65957): prog-id=2054 op=LOAD
type=BPF msg=audit(1765015040.913:65958): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015040.917:65959): prog-id=2055 op=LOAD
type=BPF msg=audit(1765015040.917:65960): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015040.921:65961): prog-id=2056 op=LOAD
type=BPF msg=audit(1765015040.921:65962): prog-id=2057 op=LOAD
type=BPF msg=audit(1765015040.921:65963): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015040.921:65964): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015040.922:65965): prog-id=2058 op=LOAD
type=BPF msg=audit(1765015040.922:65966): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015040.922:65967): prog-id=2059 op=LOAD
type=BPF msg=audit(1765015040.923:65968): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015040.923:65969): prog-id=2060 op=LOAD
type=BPF msg=audit(1765015040.923:65970): prog-id=2061 op=LOAD
type=BPF msg=audit(1765015040.923:65971): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015040.923:65972): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015040.924:65973): prog-id=2062 op=LOAD
type=BPF msg=audit(1765015040.924:65974): prog-id=2063 op=LOAD
type=BPF msg=audit(1765015040.924:65975): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015040.924:65976): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015040.925:65977): prog-id=2064 op=LOAD
type=BPF msg=audit(1765015040.925:65978): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015040.925:65979): prog-id=2065 op=LOAD
type=BPF msg=audit(1765015040.925:65980): prog-id=2066 op=LOAD
type=BPF msg=audit(1765015040.925:65981): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015040.925:65982): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1765015040.935:65983): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015040.961:65984): pid=274361 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015040.961:65985): pid=274361 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015040.967:65986): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015040.967:65987): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015040.985:65988): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015040.985:65989): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015040.987:65990): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274425 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015041.018:65991): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015041.018:65992): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015041.259:65993): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015041.259:65994): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015041.261:65995): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274442 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015041.290:65996): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015041.290:65997): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015041.303:65998): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015041.303:65999): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015041.304:66000): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274458 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015041.339:66001): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015041.339:66002): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015041.374:66003): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015041.374:66004): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015041.375:66005): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274480 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015041.436:66006): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015041.437:66007): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015041.465:66008): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015041.465:66009): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015041.467:66010): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274496 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015041.494:66011): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015041.494:66012): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015041.513:66013): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015041.513:66014): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015041.514:66015): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274513 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015041.563:66016): pid=274532 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015041.564:66017): pid=274532 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D617A6F6F61766A786D6A75627A796A77757365686C78706B72677067736D7471203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353034312E323932303431352D323336302D3134393835393939373933383638392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015041.565:66018): pid=274532 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015041.571:66019): pid=274532 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015041.794:66020): pid=274532 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015041.794:66021): pid=274532 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015041.799:66022): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015041.799:66023): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015041.817:66024): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015041.817:66025): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015041.819:66026): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274536 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015041.851:66027): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015041.851:66028): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015041.888:66029): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015041.888:66030): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015041.890:66031): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274553 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015041.925:66032): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015041.925:66033): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015041.941:66034): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015041.942:66035): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015041.943:66036): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274569 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015042.011:66037): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015042.011:66038): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015042.030:66039): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015042.031:66040): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015042.032:66041): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274591 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015042.088:66042): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015042.088:66043): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015042.107:66044): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015042.107:66045): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015042.109:66046): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274607 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015042.142:66047): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015042.142:66048): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015042.160:66049): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015042.160:66050): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015042.161:66051): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274624 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015042.228:66052): pid=274643 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015042.228:66053): pid=274643 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C65767278686A78797765706A78646D79777A6D627A76766C6973756B6F6A6C203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353034312E393239393531372D323336302D3135393639303734353239373538322F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015042.228:66054): pid=274643 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015042.231:66055): pid=274643 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015042.471:66056): pid=274643 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015042.472:66057): pid=274643 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015042.473:66058): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015042.474:66059): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015042.488:66060): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015042.488:66061): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015042.489:66062): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274647 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015042.517:66063): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015042.518:66064): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015042.550:66065): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015042.550:66066): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015042.551:66067): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274664 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015042.582:66068): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015042.583:66069): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015042.600:66070): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015042.600:66071): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015042.602:66072): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274680 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015042.639:66073): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015042.639:66074): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015042.671:66075): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015042.672:66076): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015042.673:66077): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274702 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015042.733:66078): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015042.733:66079): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015042.747:66080): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015042.748:66081): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015042.749:66082): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274718 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015042.778:66083): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015042.778:66084): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015042.793:66085): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015042.793:66086): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015042.794:66087): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274735 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015042.844:66088): pid=274754 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015042.844:66089): pid=274754 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676A677967706E696F7062746678756462716B777365706C70647772696D7279203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353034322E353834363337362D323336302D3135353035383033353236333537352F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015042.845:66090): pid=274754 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015042.848:66091): pid=274754 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015043.080:66092): pid=274754 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015043.081:66093): pid=274754 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015043.083:66094): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015043.083:66095): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015043.099:66096): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015043.099:66097): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015043.100:66098): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274758 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015043.121:66099): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015043.122:66100): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015043.153:66101): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015043.153:66102): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015043.154:66103): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274775 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015043.181:66104): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015043.181:66105): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015043.194:66106): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015043.194:66107): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015043.195:66108): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274791 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015043.226:66109): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015043.226:66110): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015043.248:66111): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015043.249:66112): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015043.250:66113): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274813 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015043.290:66114): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015043.291:66115): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015043.304:66116): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015043.305:66117): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015043.306:66118): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274829 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015043.363:66119): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015043.364:66120): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015043.375:66121): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015043.375:66122): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015043.377:66123): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274846 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015043.435:66124): pid=274865 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015043.435:66125): pid=274865 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6579797972757A66767273647A62656C716E7963746D67737A727878736C6D203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353034332E3138343139392D323336302D36393536303232313332343639392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015043.436:66126): pid=274865 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015043.439:66127): pid=274865 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015043.714:66128): pid=274865 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015043.714:66129): pid=274865 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015043.717:66130): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015043.717:66131): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015043.736:66132): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015043.736:66133): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015043.738:66134): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274869 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015043.772:66135): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015043.772:66136): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015043.827:66137): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015043.827:66138): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015043.829:66139): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274886 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015043.857:66140): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015043.857:66141): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015043.881:66142): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015043.881:66143): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015043.882:66144): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274902 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015043.909:66145): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015043.909:66146): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015043.941:66147): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015043.941:66148): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015043.942:66149): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274924 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015043.986:66150): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015043.986:66151): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015044.012:66152): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015044.012:66153): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015044.013:66154): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274940 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015044.040:66155): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015044.040:66156): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015044.058:66157): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015044.058:66158): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015044.059:66159): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274957 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015044.104:66160): pid=274976 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015044.104:66161): pid=274976 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A77646D7266676872676E746674676E6D6D657A6478776D787261656A657868203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353034332E383539393338312D323336302D3234343735323839323238343533392F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015044.104:66162): pid=274976 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015044.106:66163): pid=274976 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015044.291:66164): pid=274976 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015044.291:66165): pid=274976 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015044.293:66166): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015044.293:66167): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015044.304:66168): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015044.304:66169): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015044.305:66170): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274980 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015044.330:66171): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015044.330:66172): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015044.349:66173): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015044.349:66174): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015044.351:66175): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=274997 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015044.385:66176): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015044.385:66177): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015044.396:66178): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015044.396:66179): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015044.397:66180): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275013 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015044.430:66181): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015044.430:66182): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015044.458:66183): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015044.458:66184): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015044.459:66185): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275035 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015044.508:66186): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015044.508:66187): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015044.524:66188): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015044.524:66189): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015044.525:66190): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275051 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015044.550:66191): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015044.550:66192): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015044.570:66193): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015044.570:66194): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015044.572:66195): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275068 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015044.630:66196): pid=275087 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015044.631:66197): pid=275087 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6163666378627565657368626E6478726F7568636B7763776F696E6A72696175203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353034342E333836343132342D323336302D353038303338353530353332312F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015044.631:66198): pid=275087 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015044.633:66199): pid=275087 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015044.876:66200): pid=275087 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015044.876:66201): pid=275087 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015044.878:66202): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015044.878:66203): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015044.890:66204): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015044.890:66205): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015044.892:66206): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275091 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015044.922:66207): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015044.922:66208): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015044.955:66209): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015044.956:66210): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015044.957:66211): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275108 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015044.981:66212): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015044.982:66213): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015045.002:66214): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015045.002:66215): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015045.003:66216): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275124 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015045.033:66217): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015045.034:66218): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015045.058:66219): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015045.059:66220): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015045.060:66221): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275146 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015045.121:66222): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015045.121:66223): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015045.142:66224): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015045.142:66225): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015045.143:66226): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275162 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015045.174:66227): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015045.174:66228): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015045.193:66229): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015045.193:66230): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015045.194:66231): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275179 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015045.237:66232): pid=275198 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015045.237:66233): pid=275198 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D617A70766A696A6B6778636A6D756861687575746E79706B64616A6269726D75203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353034342E3938343036362D323336302D3233353332323136333434323834382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015045.237:66234): pid=275198 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015045.239:66235): pid=275198 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015045.465:66236): pid=275198 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015045.465:66237): pid=275198 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015045.468:66238): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015045.468:66239): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015045.479:66240): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015045.479:66241): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015045.481:66242): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275202 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015045.511:66243): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015045.511:66244): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015045.532:66245): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015045.532:66246): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015045.534:66247): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275219 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015045.561:66248): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015045.561:66249): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015045.579:66250): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015045.579:66251): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015045.580:66252): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275235 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015045.604:66253): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015045.604:66254): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015045.629:66255): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015045.629:66256): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015045.630:66257): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275257 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015045.689:66258): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015045.689:66259): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015045.710:66260): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015045.710:66261): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015045.711:66262): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275273 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015045.742:66263): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015045.742:66264): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015045.754:66265): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015045.754:66266): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015045.755:66267): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275290 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015045.809:66268): pid=275309 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015045.809:66269): pid=275309 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D627778686B6A797A69667A6A687973796A617773646D667A65796D7976646F61203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353034352E353632393839372D323336302D36303937383436383834343137332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015045.810:66270): pid=275309 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015045.812:66271): pid=275309 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015046.030:66272): pid=275309 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015046.030:66273): pid=275309 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015046.032:66274): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015046.032:66275): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015046.059:66276): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015046.059:66277): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015046.060:66278): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275313 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015046.095:66279): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015046.095:66280): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015049.904:66281): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015049.904:66282): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015049.907:66283): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275330 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015049.937:66284): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015049.937:66285): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015049.955:66286): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015049.956:66287): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015049.957:66288): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275346 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015049.992:66289): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015049.992:66290): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015050.031:66291): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015050.031:66292): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015050.033:66293): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275368 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015050.094:66294): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015050.095:66295): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015050.115:66296): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015050.115:66297): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015050.117:66298): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275384 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015050.147:66299): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015050.148:66300): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015050.166:66301): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015050.166:66302): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015050.168:66303): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275401 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015050.227:66304): pid=275420 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015050.227:66305): pid=275420 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62657274796E6B7A767064776F6D7473697661706E706473636C716562616178203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353034392E393339303439352D323536382D31373334333934303431373636372F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015050.227:66306): pid=275420 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015050.230:66307): pid=275420 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015050.431:66308): pid=275420 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015050.431:66309): pid=275420 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015050.435:66310): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015050.435:66311): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015050.457:66312): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015050.457:66313): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015050.458:66314): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275423 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015050.487:66315): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015050.487:66316): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015050.550:66317): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015050.550:66318): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015050.551:66319): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275440 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015050.586:66320): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015050.586:66321): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015050.598:66322): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015050.599:66323): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015050.600:66324): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275456 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015050.639:66325): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015050.639:66326): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015050.667:66327): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015050.667:66328): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015050.668:66329): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275478 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015050.731:66330): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015050.731:66331): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015050.750:66332): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015050.750:66333): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015050.751:66334): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275494 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015050.788:66335): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015050.789:66336): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015050.804:66337): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015050.804:66338): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015050.806:66339): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275511 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015050.876:66340): pid=275530 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015050.877:66341): pid=275530 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616361707364777374656978746377726A65627A6A796E6A78796C62676F6B70203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353035302E353837393236392D323536382D3137313936393938343736333936352F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015050.877:66342): pid=275530 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015050.880:66343): pid=275530 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015051.093:66344): pid=275530 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015051.093:66345): pid=275530 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015051.097:66346): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015051.098:66347): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015051.117:66348): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015051.117:66349): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015051.119:66350): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275533 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015051.149:66351): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015051.150:66352): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015051.189:66353): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015051.189:66354): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015051.191:66355): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275550 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015051.223:66356): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015051.223:66357): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015051.235:66358): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015051.235:66359): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015051.237:66360): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275566 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015051.274:66361): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015051.274:66362): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015051.299:66363): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015051.299:66364): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015051.300:66365): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275588 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015051.369:66366): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015051.369:66367): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015051.393:66368): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015051.393:66369): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015051.395:66370): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275604 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015051.428:66371): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015051.428:66372): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015051.444:66373): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015051.444:66374): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015051.445:66375): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275621 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015051.506:66376): pid=275640 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015051.507:66377): pid=275640 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726E66646A706662746B6179666C717164756166736B6F677663666A66666470203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353035312E323235353735342D323536382D3139363438303331373534313931302F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015051.507:66378): pid=275640 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015051.510:66379): pid=275640 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015051.720:66380): pid=275640 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015051.721:66381): pid=275640 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015051.724:66382): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015051.724:66383): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015051.745:66384): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015051.745:66385): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015051.746:66386): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275643 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015051.777:66387): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015051.777:66388): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015052.054:66389): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015052.054:66390): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015052.055:66391): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275660 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015052.081:66392): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015052.081:66393): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015052.092:66394): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015052.092:66395): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015052.093:66396): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275676 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015052.126:66397): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015052.127:66398): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015052.155:66399): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015052.155:66400): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015052.157:66401): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275698 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015052.205:66402): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015052.206:66403): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015052.219:66404): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015052.219:66405): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015052.221:66406): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275714 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015052.252:66407): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015052.252:66408): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015052.273:66409): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015052.273:66410): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015052.275:66411): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275731 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015052.343:66412): pid=275750 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015052.344:66413): pid=275750 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B776D796D6F7276796F6B73757075747773756C616B6A67656D766C756C6969203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353035322E303832373333362D323633332D3236303036333537393036313532372F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015052.344:66414): pid=275750 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015052.354:66415): pid=275750 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1765015052.356:66416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015052.487:66417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015052.577:66418): pid=275750 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015052.578:66419): pid=275750 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015052.582:66420): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015052.582:66421): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015052.607:66422): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015052.607:66423): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015052.609:66424): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275771 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015052.640:66425): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015052.640:66426): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015052.701:66427): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015052.701:66428): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015052.703:66429): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275788 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015052.733:66430): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015052.733:66431): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015052.756:66432): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015052.756:66433): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015052.757:66434): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275804 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015052.791:66435): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015052.791:66436): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015052.824:66437): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015052.824:66438): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015052.825:66439): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275826 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015052.876:66440): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015052.876:66441): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015052.896:66442): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015052.896:66443): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015052.898:66444): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275842 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015052.927:66445): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015052.927:66446): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015052.949:66447): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015052.949:66448): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015052.951:66449): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275859 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015053.011:66450): pid=275878 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015053.012:66451): pid=275878 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6A72616A7776736F78786262737067706A78746F66727A726A7468706C736A203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353035322E373336343236362D323633332D3138313832393835353231373937342F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015053.013:66452): pid=275878 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015053.017:66453): pid=275878 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015053.233:66454): pid=275878 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015053.233:66455): pid=275878 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015053.236:66456): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015053.236:66457): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015053.258:66458): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015053.258:66459): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015053.260:66460): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275881 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015053.290:66461): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015053.290:66462): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015053.341:66463): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015053.341:66464): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015053.343:66465): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275898 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015053.370:66466): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015053.370:66467): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015053.391:66468): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015053.391:66469): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015053.393:66470): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275914 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015053.422:66471): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015053.423:66472): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015053.461:66473): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015053.461:66474): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015053.462:66475): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275936 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015053.517:66476): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015053.518:66477): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015053.532:66478): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015053.533:66479): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015053.534:66480): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275952 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015053.560:66481): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015053.560:66482): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015053.576:66483): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015053.576:66484): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015053.577:66485): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275969 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015053.628:66486): pid=275988 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015053.629:66487): pid=275988 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78657A7275667967786F6B7374776B697779626669757676706D78786161786D203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353035332E333732373737372D323633332D3237313639353136393032353539322F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015053.629:66488): pid=275988 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015053.632:66489): pid=275988 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015053.812:66490): pid=275988 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015053.813:66491): pid=275988 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015053.816:66492): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015053.816:66493): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015053.832:66494): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015053.832:66495): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015053.833:66496): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=275991 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015053.864:66497): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015053.864:66498): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015053.909:66499): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015053.909:66500): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015053.910:66501): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276008 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015053.941:66502): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015053.941:66503): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015053.954:66504): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015053.955:66505): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015053.956:66506): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276024 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015053.995:66507): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015053.995:66508): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015054.028:66509): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015054.028:66510): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015054.029:66511): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276046 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015054.082:66512): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015054.083:66513): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015054.105:66514): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015054.105:66515): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015054.107:66516): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276062 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015054.138:66517): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015054.138:66518): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015054.157:66519): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015054.157:66520): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015054.159:66521): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276079 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015054.224:66522): pid=276098 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015054.224:66523): pid=276098 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78776464776D787974746362766B71736173617271626371766A776D74707669203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353035332E3934333137372D323633332D383933343633393031333232382F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015054.224:66524): pid=276098 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015054.227:66525): pid=276098 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015054.460:66526): pid=276098 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015054.461:66527): pid=276098 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015054.464:66528): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015054.464:66529): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015054.478:66530): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015054.478:66531): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015054.479:66532): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276101 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015054.512:66533): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015054.513:66534): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015054.535:66535): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015054.535:66536): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015054.536:66537): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276118 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015054.568:66538): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015054.568:66539): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015054.584:66540): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015054.584:66541): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015054.585:66542): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276134 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015054.625:66543): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015054.625:66544): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015054.655:66545): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015054.655:66546): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015054.656:66547): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276156 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015054.711:66548): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015054.711:66549): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015054.724:66550): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015054.724:66551): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015054.725:66552): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276172 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015054.760:66553): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015054.760:66554): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015054.773:66555): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015054.773:66556): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015054.774:66557): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276189 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015054.837:66558): pid=276208 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015054.837:66559): pid=276208 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7272667277777079677563796E636D71636F797A6D6A61796672676270697574203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353035342E353639353137342D323633332D35303632313537363931373235352F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015054.838:66560): pid=276208 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015054.841:66561): pid=276208 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015055.067:66562): pid=276208 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015055.067:66563): pid=276208 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015055.071:66564): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015055.071:66565): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015055.085:66566): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015055.085:66567): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015055.086:66568): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276211 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015055.113:66569): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015055.114:66570): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015055.170:66571): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015055.170:66572): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015055.171:66573): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276228 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015055.203:66574): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015055.203:66575): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015055.217:66576): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015055.217:66577): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015055.218:66578): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276244 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015055.254:66579): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015055.255:66580): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015055.277:66581): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015055.278:66582): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015055.279:66583): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276266 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015055.329:66584): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015055.329:66585): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015055.342:66586): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015055.342:66587): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015055.343:66588): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276282 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015055.375:66589): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015055.375:66590): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015055.391:66591): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015055.391:66592): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015055.393:66593): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276299 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015055.455:66594): pid=276318 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015055.455:66595): pid=276318 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71797876717267636B646C7261616C63766F6D72636766676F72706467796A79203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353035352E3230373436342D323633332D38393136363336343238323839352F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015055.456:66596): pid=276318 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015055.458:66597): pid=276318 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015055.669:66598): pid=276318 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015055.669:66599): pid=276318 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015055.673:66600): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015055.673:66601): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015055.689:66602): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015055.689:66603): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015055.691:66604): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276321 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015055.720:66605): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015055.720:66606): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015055.770:66607): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015055.770:66608): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015055.771:66609): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276338 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015055.790:66610): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015055.791:66611): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015055.811:66612): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015055.811:66613): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015055.813:66614): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276354 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015055.849:66615): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015055.849:66616): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015055.886:66617): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015055.886:66618): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015055.887:66619): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276376 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015055.944:66620): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015055.944:66621): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015055.962:66622): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015055.962:66623): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015055.963:66624): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276392 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015055.995:66625): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015055.995:66626): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015056.013:66627): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015056.013:66628): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015056.015:66629): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276409 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015056.080:66630): pid=276428 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015056.080:66631): pid=276428 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E616D6B626963697766796E68646462627165676D667367736D647A6F796374203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353035352E373933333433332D323633332D32363732323739383533353039392F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015056.081:66632): pid=276428 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015056.083:66633): pid=276428 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015056.318:66634): pid=276428 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015056.318:66635): pid=276428 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015056.321:66636): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015056.321:66637): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015056.335:66638): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015056.335:66639): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015056.336:66640): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276431 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015056.359:66641): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015056.359:66642): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1765015057.473:66643): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015057.476:66644): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015057.636:66645): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015057.741:66646): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015059.471:66647): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015059.576:66648): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015059.666:66649): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015059.666:66650): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015059.729:66651): pid=276511 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015059.730:66652): pid=276511 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015059.731:66653): pid=276511 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015059.734:66654): pid=276511 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015059.737:66655): pid=276511 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015059.737:66656): pid=276511 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015059.748:66657): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015059.748:66658): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015059.767:66659): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015059.768:66660): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015059.831:66661): pid=276529 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015059.831:66662): pid=276529 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015059.832:66663): pid=276529 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015059.835:66664): pid=276529 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015060.481:66665): pid=276529 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015060.481:66666): pid=276529 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015060.630:66667): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015060.630:66668): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015061.185:66669): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015061.185:66670): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015061.251:66671): pid=276578 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015061.251:66672): pid=276578 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015061.252:66673): pid=276578 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015061.255:66674): pid=276578 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015061.258:66675): pid=276578 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015061.258:66676): pid=276578 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015061.263:66677): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015061.263:66678): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015061.888:66679): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015061.888:66680): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015061.890:66681): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276596 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015061.919:66682): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015061.920:66683): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015061.929:66684): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015061.929:66685): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015061.931:66686): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276612 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015061.965:66687): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015061.965:66688): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015062.117:66689): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015062.118:66690): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015062.119:66691): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276634 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015062.164:66692): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015062.164:66693): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015062.176:66694): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015062.177:66695): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015062.178:66696): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276650 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015062.206:66697): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015062.206:66698): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015062.221:66699): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015062.221:66700): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015062.223:66701): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276667 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015062.289:66702): pid=276686 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015062.290:66703): pid=276686 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6677797663616D636B727875756F6969696878766A7265776D646E6B647171203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353036312E393231313433352D323935392D3235393431353334383133353035352F416E736962616C6C5A5F676574656E742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015062.290:66704): pid=276686 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015062.293:66705): pid=276686 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015062.503:66706): pid=276686 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015062.503:66707): pid=276686 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015062.505:66708): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015062.505:66709): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015062.527:66710): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015062.527:66711): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015062.528:66712): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276690 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015062.546:66713): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015062.547:66714): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015063.726:66715): pid=276708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276708 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765015063.727:66716): pid=276707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=276708 suid=74 rport=57070 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765015063.727:66717): pid=276707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=276708 suid=74 rport=57070 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765015063.808:66718): pid=276707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015063.808:66719): pid=276707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:e0:39:03:0c:58:11:ed:73:22:37:9b:fb:b5:96:ae:e6:c9:d5:b4:79:86:de:e9:6d:a3:5f:2e:d5:1c:00:d2:eb exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765015063.836:66720): pid=276707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015063.837:66721): pid=276707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=276708 suid=74 rport=57070 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765015063.839:66722): pid=276707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765015063.839:66723): pid=276707 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=60 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1765015063.839:66723): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc49f37eb0 a2=4 a3=3e8 items=0 ppid=182854 pid=276707 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=60 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015063.839:66723): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765015063.841:66724): pid=276707 uid=0 auid=1000 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1765015063.877:66725): pid=276707 uid=0 auid=1000 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015063.878:66726): pid=276710 uid=0 auid=1000 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276710 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=CRED_ACQ msg=audit(1765015063.879:66727): pid=276710 uid=0 auid=1000 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1765015063.921:66728): pid=276707 uid=0 auid=1000 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015063.921:66729): pid=276707 uid=0 auid=1000 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015063.922:66730): pid=276707 uid=0 auid=1000 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276711 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015063.990:66731): pid=276707 uid=0 auid=1000 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=276710 suid=1000 rport=57070 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015063.991:66732): pid=276707 uid=0 auid=1000 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276710 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015063.993:66733): pid=276707 uid=0 auid=1000 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1765015063.994:66734): pid=276707 uid=0 auid=1000 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_END msg=audit(1765015063.994:66735): pid=276707 uid=0 auid=1000 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015063.994:66736): pid=276707 uid=0 auid=1000 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015063.995:66737): pid=276707 uid=0 auid=1000 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276707 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=USER_LOGIN msg=audit(1765015064.259:66738): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015064.259:66739): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015064.260:66740): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276728 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015064.292:66741): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015064.292:66742): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015064.304:66743): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015064.304:66744): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015064.305:66745): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276744 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015064.337:66746): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015064.337:66747): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015064.379:66748): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015064.379:66749): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015064.380:66750): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276766 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015064.438:66751): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015064.438:66752): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015064.452:66753): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015064.452:66754): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015064.453:66755): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276782 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=SERVICE_START msg=audit(1765015064.477:66756): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015064.484:66757): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015064.484:66758): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015064.497:66759): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015064.497:66760): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015064.498:66761): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276805 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=SERVICE_STOP msg=audit(1765015064.610:66762): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015064.759:66763): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015064.759:66764): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015064.786:66765): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015064.786:66766): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015064.786:66767): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276837 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015064.823:66768): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015064.823:66769): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015064.842:66770): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015064.842:66771): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015064.844:66772): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276853 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015064.876:66773): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015064.876:66774): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015064.908:66775): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015064.908:66776): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015064.909:66777): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276870 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015064.966:66778): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015064.966:66779): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015064.986:66780): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015064.987:66781): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015064.988:66782): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276886 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015065.018:66783): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015065.018:66784): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015065.034:66785): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015065.034:66786): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015065.035:66787): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276903 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015065.291:66788): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015065.291:66789): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015065.314:66790): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015065.314:66791): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015065.315:66792): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276923 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015065.345:66793): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015065.346:66794): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015065.384:66795): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015065.384:66796): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015065.386:66797): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276940 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015065.415:66798): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015065.415:66799): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015065.433:66800): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015065.433:66801): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015065.434:66802): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276956 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015065.469:66803): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015065.469:66804): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015065.517:66805): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015065.517:66806): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015065.517:66807): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276978 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015065.575:66808): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015065.575:66809): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015065.591:66810): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015065.591:66811): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015065.593:66812): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=276994 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015065.628:66813): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015065.628:66814): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015065.648:66815): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015065.648:66816): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015065.650:66817): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277011 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015065.919:66818): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015065.919:66819): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015065.956:66820): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015065.956:66821): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015065.957:66822): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277033 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015066.020:66823): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015066.021:66824): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015066.043:66825): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015066.043:66826): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015066.045:66827): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277049 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015066.077:66828): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015066.078:66829): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015066.100:66830): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015066.100:66831): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015066.102:66832): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277066 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015066.366:66833): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015066.366:66834): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015066.391:66835): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015066.392:66836): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015066.393:66837): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277086 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015066.422:66838): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015066.422:66839): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015067.065:66840): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015067.065:66841): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015067.072:66842): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277103 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015067.101:66843): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015067.101:66844): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015067.125:66845): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015067.125:66846): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015067.126:66847): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277119 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015067.159:66848): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015067.160:66849): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015067.216:66850): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015067.216:66851): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015067.218:66852): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277141 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015067.277:66853): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015067.277:66854): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015067.289:66855): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015067.289:66856): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015067.290:66857): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277157 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015067.322:66858): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015067.322:66859): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015067.332:66860): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015067.332:66861): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015067.333:66862): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277174 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=SERVICE_START msg=audit(1765015067.475:66863): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015067.572:66864): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015067.572:66865): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_STOP msg=audit(1765015067.593:66866): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015067.603:66867): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015067.603:66868): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015067.604:66869): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277217 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015067.642:66870): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015067.642:66871): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015067.662:66872): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015067.662:66873): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015067.664:66874): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277233 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015067.695:66875): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015067.695:66876): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015067.736:66877): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015067.736:66878): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015067.738:66879): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277250 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015067.800:66880): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015067.800:66881): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015067.822:66882): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015067.822:66883): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015067.823:66884): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277266 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015067.855:66885): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015067.855:66886): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015067.870:66887): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015067.870:66888): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015067.871:66889): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277283 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015068.126:66890): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015068.127:66891): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015068.150:66892): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015068.150:66893): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015068.151:66894): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277303 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015068.182:66895): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015068.183:66896): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015068.230:66897): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015068.230:66898): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015068.232:66899): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277320 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015068.263:66900): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015068.263:66901): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015068.284:66902): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015068.284:66903): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015068.286:66904): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277336 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015068.369:66905): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015068.369:66906): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015068.435:66907): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015068.435:66908): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015068.437:66909): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277358 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015068.496:66910): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015068.496:66911): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015068.518:66912): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015068.518:66913): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015068.520:66914): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277374 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015068.553:66915): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015068.553:66916): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015068.575:66917): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015068.575:66918): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015068.577:66919): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277391 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015068.831:66920): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015068.831:66921): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015068.845:66922): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015068.845:66923): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015068.847:66924): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277411 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015068.883:66925): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015068.884:66926): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015068.897:66927): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015068.897:66928): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015068.898:66929): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277427 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015068.930:66930): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015068.930:66931): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015068.952:66932): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015068.953:66933): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015068.954:66934): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277444 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015068.998:66935): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015068.998:66936): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015069.012:66937): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015069.012:66938): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015069.013:66939): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277460 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015069.044:66940): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015069.044:66941): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015069.055:66942): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015069.055:66943): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015069.057:66944): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277477 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015069.308:66945): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015069.308:66946): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015069.322:66947): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015069.323:66948): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015069.324:66949): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277497 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015069.353:66950): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015069.353:66951): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015069.395:66952): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015069.395:66953): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015069.396:66954): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277514 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015069.428:66955): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015069.428:66956): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015069.441:66957): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015069.442:66958): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015069.443:66959): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277530 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015069.481:66960): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015069.481:66961): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015069.537:66962): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015069.537:66963): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015069.539:66964): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277552 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015069.589:66965): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015069.589:66966): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015069.612:66967): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015069.612:66968): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015069.614:66969): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277568 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015069.646:66970): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015069.646:66971): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015069.668:66972): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015069.668:66973): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015069.669:66974): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277585 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015069.919:66975): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015069.919:66976): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015069.941:66977): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015069.941:66978): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015069.942:66979): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277605 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015069.975:66980): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015069.976:66981): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015069.989:66982): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015069.989:66983): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015069.990:66984): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277621 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015070.022:66985): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015070.023:66986): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015070.055:66987): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015070.055:66988): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015070.056:66989): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277638 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015070.132:66990): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015070.132:66991): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015070.166:66992): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015070.166:66993): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015070.167:66994): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277654 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015070.199:66995): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015070.200:66996): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015070.244:66997): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015070.244:66998): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015070.245:66999): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277671 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015070.503:67000): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015070.503:67001): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015070.522:67002): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015070.522:67003): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015070.524:67004): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277691 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015070.553:67005): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015070.553:67006): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015070.588:67007): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015070.588:67008): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015070.590:67009): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277708 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015070.618:67010): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015070.618:67011): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015070.642:67012): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015070.642:67013): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015070.643:67014): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277724 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015070.675:67015): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015070.675:67016): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015070.729:67017): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015070.729:67018): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015070.729:67019): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277746 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015070.776:67020): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015070.776:67021): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015070.789:67022): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015070.789:67023): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015070.790:67024): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277762 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015070.818:67025): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015070.818:67026): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015070.835:67027): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015070.835:67028): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015070.837:67029): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277779 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015071.080:67030): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015071.080:67031): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015071.111:67032): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015071.112:67033): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015071.113:67034): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277799 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015071.148:67035): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015071.148:67036): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015071.168:67037): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015071.168:67038): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015071.169:67039): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277815 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015071.200:67040): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015071.201:67041): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015071.235:67042): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015071.235:67043): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015071.235:67044): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277832 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015071.282:67045): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015071.282:67046): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015071.303:67047): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015071.303:67048): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015071.305:67049): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277848 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015071.340:67050): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015071.340:67051): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015071.356:67052): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015071.356:67053): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015071.357:67054): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277865 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=SERVICE_START msg=audit(1765015071.480:67055): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015071.609:67056): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015071.631:67057): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015071.631:67058): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015071.657:67059): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015071.657:67060): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015071.658:67061): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277911 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015071.691:67062): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015071.691:67063): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015071.875:67064): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015071.875:67065): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015071.876:67066): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277928 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015071.909:67067): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015071.909:67068): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015071.928:67069): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015071.928:67070): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015071.930:67071): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277944 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015071.971:67072): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015071.971:67073): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015072.001:67074): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015072.001:67075): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015072.003:67076): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277966 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015072.065:67077): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015072.065:67078): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015072.080:67079): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015072.080:67080): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015072.082:67081): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277982 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015072.116:67082): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015072.116:67083): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015072.149:67084): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015072.149:67085): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015072.151:67086): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=277999 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015072.227:67087): pid=278018 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015072.227:67088): pid=278018 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A79637178756C78766373626D6B75686C6F736D79646A7964736A6274667972203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353037312E393132343235382D333238392D35383434363937353130313239312F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015072.228:67089): pid=278018 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015072.232:67090): pid=278018 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015072.461:67091): pid=278018 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015072.461:67092): pid=278018 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015072.466:67093): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015072.466:67094): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015072.489:67095): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015072.490:67096): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015072.491:67097): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278021 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015072.525:67098): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015072.526:67099): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015072.636:67100): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015072.636:67101): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015072.638:67102): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278038 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015072.671:67103): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015072.672:67104): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015072.691:67105): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015072.691:67106): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015072.692:67107): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278054 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015072.733:67108): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015072.733:67109): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015072.774:67110): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015072.774:67111): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015072.776:67112): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278076 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015072.836:67113): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015072.836:67114): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015072.859:67115): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015072.859:67116): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015072.860:67117): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278092 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015072.894:67118): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015072.894:67119): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015072.907:67120): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015072.907:67121): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015072.909:67122): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278109 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015072.981:67123): pid=278128 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015072.981:67124): pid=278128 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D697A706F6F7065756E7072756A6B6B6D746868696676626A696771706B657673203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353037322E3637353636322D333331332D3130353235323334333332393531322F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015072.983:67125): pid=278128 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015072.987:67126): pid=278128 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015073.226:67127): pid=278128 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015073.226:67128): pid=278128 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015073.231:67129): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015073.232:67130): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015073.247:67131): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015073.247:67132): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015073.249:67133): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278131 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015073.278:67134): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015073.278:67135): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015073.452:67136): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015073.452:67137): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015073.454:67138): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278148 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015073.484:67139): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015073.485:67140): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015073.495:67141): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015073.495:67142): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015073.496:67143): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278164 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015073.535:67144): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015073.535:67145): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015073.560:67146): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015073.560:67147): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015073.562:67148): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278186 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015073.615:67149): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015073.616:67150): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015073.627:67151): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015073.627:67152): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015073.629:67153): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278202 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015073.664:67154): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015073.664:67155): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015073.680:67156): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015073.680:67157): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015073.682:67158): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278219 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015073.748:67159): pid=278238 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015073.748:67160): pid=278238 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626C796477766C786E6C777478667961686F7A7768667176647868626F6F676E203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353037332E3438363637362D333333382D3132303239323139333236363738392F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015073.749:67161): pid=278238 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015073.752:67162): pid=278238 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015073.991:67163): pid=278238 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015073.991:67164): pid=278238 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015073.995:67165): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015073.995:67166): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015074.028:67167): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015074.028:67168): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015074.029:67169): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278243 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015074.065:67170): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015074.065:67171): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015074.246:67172): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015074.246:67173): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015074.247:67174): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278260 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015074.283:67175): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015074.283:67176): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015074.315:67177): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015074.315:67178): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015074.316:67179): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278276 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015074.358:67180): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015074.358:67181): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015074.422:67182): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015074.422:67183): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015074.424:67184): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278298 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015074.483:67185): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015074.484:67186): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015074.501:67187): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015074.501:67188): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015074.503:67189): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278314 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015074.535:67190): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015074.535:67191): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015074.551:67192): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015074.551:67193): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015074.553:67194): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278331 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015074.623:67195): pid=278350 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015074.624:67196): pid=278350 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63767776647465766C676E6C6B7976786F67766A6D7068616F77756871646763203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353037342E323835313935342D333336342D3131373535363432363537343235372F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015074.624:67197): pid=278350 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015074.627:67198): pid=278350 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015074.857:67199): pid=278350 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015074.858:67200): pid=278350 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015074.860:67201): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015074.861:67202): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015074.879:67203): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015074.879:67204): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015074.881:67205): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278353 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015074.907:67206): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015074.907:67207): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015075.191:67208): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015075.191:67209): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015075.192:67210): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278370 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015075.218:67211): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015075.218:67212): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015075.235:67213): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015075.235:67214): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015075.236:67215): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278386 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015075.268:67216): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015075.268:67217): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015075.293:67218): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015075.293:67219): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015075.295:67220): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278408 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015075.352:67221): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015075.352:67222): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015075.372:67223): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015075.372:67224): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015075.373:67225): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278424 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015075.399:67226): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015075.399:67227): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015075.419:67228): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015075.420:67229): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015075.421:67230): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278441 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015075.683:67231): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015075.683:67232): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015075.709:67233): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015075.710:67234): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015075.711:67235): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278463 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015075.736:67236): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015075.736:67237): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015075.886:67238): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015075.886:67239): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015075.887:67240): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278480 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015075.922:67241): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015075.922:67242): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015075.934:67243): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015075.934:67244): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015075.935:67245): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278496 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015075.965:67246): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015075.965:67247): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015076.072:67248): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015076.072:67249): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015076.074:67250): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278518 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015076.137:67251): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015076.138:67252): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015076.163:67253): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015076.163:67254): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015076.164:67255): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278534 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015076.202:67256): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015076.202:67257): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015076.217:67258): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015076.217:67259): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015076.219:67260): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278551 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015076.490:67261): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015076.491:67262): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015076.532:67263): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015076.532:67264): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015076.534:67265): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278573 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015076.609:67266): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015076.609:67267): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015076.625:67268): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015076.625:67269): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015076.627:67270): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278589 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015076.664:67271): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015076.664:67272): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015076.681:67273): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015076.681:67274): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015076.683:67275): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278606 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015076.940:67276): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015076.940:67277): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015076.956:67278): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015076.956:67279): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015076.958:67280): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278626 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015076.996:67281): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015076.997:67282): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015077.108:67283): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015077.109:67284): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015077.110:67285): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278643 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015077.148:67286): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015077.148:67287): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015077.169:67288): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015077.169:67289): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015077.171:67290): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278659 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015077.219:67291): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015077.219:67292): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015077.290:67293): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015077.290:67294): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015077.292:67295): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278681 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015077.358:67296): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015077.358:67297): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015077.386:67298): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015077.386:67299): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015077.388:67300): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278697 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015077.424:67301): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015077.424:67302): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015077.443:67303): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015077.443:67304): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015077.445:67305): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278714 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015077.717:67306): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015077.717:67307): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015077.760:67308): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015077.760:67309): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015077.761:67310): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278736 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015077.814:67311): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015077.814:67312): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015077.839:67313): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015077.839:67314): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015077.840:67315): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278752 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015077.874:67316): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015077.874:67317): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015077.898:67318): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015077.899:67319): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015077.900:67320): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278769 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015078.166:67321): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015078.167:67322): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015078.195:67323): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015078.195:67324): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015078.196:67325): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278789 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015078.227:67326): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015078.227:67327): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015078.655:67328): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015078.655:67329): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015078.656:67330): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278806 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015078.687:67331): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015078.687:67332): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015078.700:67333): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015078.700:67334): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015078.704:67335): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278822 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015078.741:67336): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015078.741:67337): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015078.772:67338): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015078.772:67339): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015078.773:67340): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278844 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015078.831:67341): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015078.831:67342): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015078.845:67343): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015078.845:67344): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015078.847:67345): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278860 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015078.884:67346): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015078.884:67347): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015078.900:67348): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015078.900:67349): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015078.902:67350): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278877 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015078.965:67351): pid=278896 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015078.965:67352): pid=278896 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686E74656D736663736A6F76656D696F65676C6E646E73787079776C76766169203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353037382E363839303831342D333439332D32383034353834313730333634342F416E736962616C6C5A5F636F6E7461696E65725F636F6E6669675F646174612E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015078.965:67353): pid=278896 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015078.968:67354): pid=278896 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015079.193:67355): pid=278896 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015079.193:67356): pid=278896 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015079.197:67357): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015079.197:67358): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015079.222:67359): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015079.222:67360): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015079.223:67361): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278899 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015079.255:67362): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015079.255:67363): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015079.517:67364): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015079.517:67365): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015079.519:67366): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278916 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015079.550:67367): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015079.550:67368): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015079.567:67369): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015079.567:67370): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015079.569:67371): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278932 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015079.610:67372): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015079.610:67373): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015079.648:67374): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015079.649:67375): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015079.650:67376): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278954 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015079.712:67377): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015079.713:67378): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015079.737:67379): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015079.737:67380): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015079.739:67381): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278970 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015079.770:67382): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015079.770:67383): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015079.795:67384): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015079.795:67385): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015079.797:67386): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=278987 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015079.862:67387): pid=279006 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015079.862:67388): pid=279006 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71676E6F736279676263736D6D676670656C6861706D6B717A70756E666F7261203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353037392E353533343438322D333531392D3232313734353639343330353330322F416E736962616C6C5A5F636F6E7461696E65725F636F6E6669675F686173682E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015079.863:67389): pid=279006 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015079.866:67390): pid=279006 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015080.092:67391): pid=279006 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015080.093:67392): pid=279006 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015080.097:67393): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015080.097:67394): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015080.134:67395): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015080.135:67396): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015080.136:67397): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279009 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015080.173:67398): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015080.173:67399): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015080.526:67400): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015080.526:67401): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015080.527:67402): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279026 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015080.563:67403): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015080.564:67404): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015080.576:67405): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015080.576:67406): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015080.578:67407): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279042 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015080.618:67408): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015080.618:67409): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015080.642:67410): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015080.642:67411): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015080.643:67412): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279064 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015080.728:67413): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015080.729:67414): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015080.745:67415): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015080.745:67416): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015080.746:67417): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279080 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015080.783:67418): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015080.783:67419): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015080.799:67420): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015080.799:67421): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015080.800:67422): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279097 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015080.872:67423): pid=279116 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015080.873:67424): pid=279116 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64637971777A686D656B71796F7662797966627A777668796D7564777575727A203B202F7573722F62696E2F707974686F6E33202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353038302E3536363730332D333535302D3136323836363930343933353532382F416E736962616C6C5A5F6564706D5F636F6E7461696E65725F6D616E6167652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015080.874:67425): pid=279116 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015080.877:67426): pid=279116 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015081.537:67427): pid=279116 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015081.537:67428): pid=279116 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015081.540:67429): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015081.540:67430): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015081.569:67431): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015081.569:67432): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015081.570:67433): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279182 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015081.605:67434): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015081.605:67435): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015081.750:67436): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015081.750:67437): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015081.755:67438): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279199 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015081.788:67439): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015081.789:67440): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015081.807:67441): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015081.807:67442): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015081.809:67443): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279215 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015081.848:67444): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015081.848:67445): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015081.886:67446): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015081.886:67447): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015081.888:67448): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279237 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015081.943:67449): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015081.943:67450): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015081.964:67451): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015081.964:67452): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015081.965:67453): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279253 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015081.997:67454): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015081.997:67455): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015082.012:67456): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015082.012:67457): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015082.014:67458): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279270 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015082.058:67459): pid=279289 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015082.059:67460): pid=279289 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667A65667562716B6D656969687A756672616A7A796379726472776C6F7A6F6D203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353038312E373930343633322D333537332D34393733373730313131353134322F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015082.059:67461): pid=279289 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015082.061:67462): pid=279289 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015082.262:67463): pid=279289 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015082.262:67464): pid=279289 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015082.265:67465): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015082.265:67466): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015082.284:67467): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015082.284:67468): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015082.285:67469): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279294 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015082.314:67470): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015082.314:67471): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015082.877:67472): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015082.877:67473): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015082.878:67474): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279311 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015082.913:67475): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015082.913:67476): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015082.944:67477): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015082.944:67478): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015082.946:67479): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279327 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015082.988:67480): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015082.988:67481): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015083.025:67482): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015083.025:67483): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015083.026:67484): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279349 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015083.091:67485): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015083.091:67486): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015083.108:67487): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015083.108:67488): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015083.110:67489): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279365 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015083.144:67490): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015083.144:67491): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015083.163:67492): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015083.163:67493): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015083.165:67494): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279382 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015083.234:67495): pid=279401 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015083.235:67496): pid=279401 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6167766B75797279786E716D72786C6179626E7666776275786E787370747769203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353038322E393135363234342D333630392D36373638393134323631323931342F416E736962616C6C5A5F636F6E7461696E65725F636F6E6669675F646174612E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015083.235:67497): pid=279401 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015083.252:67498): pid=279401 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1765015083.254:67499): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015083.387:67500): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015083.505:67501): pid=279401 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015083.505:67502): pid=279401 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015083.509:67503): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015083.509:67504): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015083.531:67505): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015083.531:67506): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015083.533:67507): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279422 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015083.568:67508): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015083.568:67509): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015083.852:67510): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015083.853:67511): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015083.854:67512): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279439 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015083.892:67513): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015083.892:67514): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015083.902:67515): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015083.902:67516): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015083.904:67517): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279455 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015083.949:67518): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015083.949:67519): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015083.984:67520): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015083.985:67521): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015083.986:67522): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279477 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015084.039:67523): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015084.039:67524): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015084.052:67525): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015084.053:67526): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015084.054:67527): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279493 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015084.091:67528): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015084.091:67529): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015084.112:67530): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015084.112:67531): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015084.114:67532): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279510 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015084.167:67533): pid=279529 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015084.167:67534): pid=279529 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6A6D78706E61616A786F646C637168616B6B726B77796C686A746F6B777070203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353038332E3839333730322D333633362D3230373131333439353134333937342F416E736962616C6C5A5F636F6E7461696E65725F636F6E6669675F686173682E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015084.168:67535): pid=279529 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015084.171:67536): pid=279529 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015084.403:67537): pid=279529 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015084.403:67538): pid=279529 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015084.407:67539): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015084.407:67540): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015084.427:67541): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015084.427:67542): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015084.428:67543): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279532 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015084.456:67544): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015084.456:67545): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015084.807:67546): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015084.807:67547): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015084.809:67548): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279549 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015084.840:67549): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015084.840:67550): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015084.869:67551): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015084.869:67552): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015084.871:67553): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279565 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015084.910:67554): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015084.910:67555): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015084.943:67556): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015084.943:67557): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015084.945:67558): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279587 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015085.009:67559): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015085.009:67560): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015085.038:67561): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015085.038:67562): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015085.039:67563): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279603 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015085.074:67564): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015085.074:67565): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015085.091:67566): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015085.091:67567): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015085.093:67568): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279620 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015085.155:67569): pid=279639 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015085.156:67570): pid=279639 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646E777675706C797A637A7A74797066676D756C646778786D6A6F7273787776203B202F7573722F62696E2F707974686F6E33202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353038342E383437323638382D333636362D3234303838393433343732313534312F416E736962616C6C5A5F6564706D5F636F6E7461696E65725F6D616E6167652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015085.156:67571): pid=279639 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015085.159:67572): pid=279639 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015085.849:67573): pid=279639 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015085.849:67574): pid=279639 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015085.853:67575): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015085.853:67576): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015085.881:67577): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015085.881:67578): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015085.883:67579): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279705 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015085.912:67580): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015085.913:67581): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015086.026:67582): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015086.026:67583): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015086.028:67584): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279722 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015086.060:67585): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015086.060:67586): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015086.077:67587): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015086.077:67588): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015086.079:67589): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279738 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015086.111:67590): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015086.111:67591): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015086.150:67592): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015086.151:67593): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015086.152:67594): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279760 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015086.267:67595): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015086.267:67596): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015086.278:67597): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015086.279:67598): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015086.280:67599): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279776 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015086.322:67600): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015086.322:67601): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015086.335:67602): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015086.335:67603): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015086.336:67604): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279793 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015086.409:67605): pid=279812 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015086.409:67606): pid=279812 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D627A736B736C666978776A63776B7873797A6B61716677727666666266796773203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353038362E303633343538322D333639312D32383737393239373431382F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015086.410:67607): pid=279812 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015086.415:67608): pid=279812 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015086.657:67609): pid=279812 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015086.657:67610): pid=279812 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015086.661:67611): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015086.661:67612): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015086.680:67613): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015086.680:67614): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015086.682:67615): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279817 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015086.717:67616): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015086.718:67617): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015086.966:67618): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015086.966:67619): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015086.967:67620): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279835 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015087.000:67621): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015087.000:67622): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015087.011:67623): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015087.011:67624): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015087.013:67625): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279851 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015087.052:67626): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015087.052:67627): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015087.083:67628): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015087.083:67629): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015087.085:67630): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279873 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015087.132:67631): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015087.133:67632): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015087.154:67633): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015087.154:67634): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015087.155:67635): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279889 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015087.193:67636): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015087.194:67637): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015087.207:67638): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015087.207:67639): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015087.209:67640): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279906 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015087.264:67641): pid=279925 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015087.264:67642): pid=279925 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636F767365666662797A6A747A726564626B64656268786469707A7673706178203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353038372E303031353532332D333731372D37343831333831333134353235392F416E736962616C6C5A5F66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015087.265:67643): pid=279925 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015087.269:67644): pid=279925 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015087.485:67645): pid=279925 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015087.485:67646): pid=279925 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015087.489:67647): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015087.489:67648): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015087.509:67649): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015087.509:67650): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015087.510:67651): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279928 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015087.544:67652): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015087.544:67653): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015087.565:67654): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015087.566:67655): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015087.567:67656): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279944 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015087.604:67657): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015087.605:67658): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015087.676:67659): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015087.677:67660): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015087.678:67661): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279966 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015087.715:67662): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015087.715:67663): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015087.741:67664): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015087.741:67665): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015087.743:67666): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279982 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015087.794:67667): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015087.794:67668): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015087.820:67669): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015087.820:67670): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015087.821:67671): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279998 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015087.849:67672): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015087.850:67673): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015087.872:67674): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015087.872:67675): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015087.874:67676): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=280015 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015087.929:67677): pid=280034 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015087.930:67678): pid=280034 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78637A67626F63796B71706B6D6C636462667968656B7466766769776D786C68203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353038372E353436343231352D333731372D3130313339303130353934313537362F416E736962616C6C5A5F636F70792E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015087.931:67679): pid=280034 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1765015087.946:67680): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015087.949:67681): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765015087.952:67682): pid=280034 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_STOP msg=audit(1765015088.072:67683): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015088.162:67684): pid=280034 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015088.162:67685): pid=280034 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015088.166:67686): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015088.166:67687): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_STOP msg=audit(1765015088.200:67688): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015088.286:67689): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015088.286:67690): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015088.288:67691): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=280077 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015088.372:67692): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015088.372:67693): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015088.392:67694): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015088.392:67695): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015088.393:67696): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=280093 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015088.428:67697): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015088.428:67698): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015088.446:67699): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015088.446:67700): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015088.448:67701): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=280110 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015088.515:67702): pid=280129 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015088.515:67703): pid=280129 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77686971756A61716C6A75777775757561727079756C6475696C766A68706E68203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353038372E353436343231352D333731372D3130313339303130353934313537362F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015088.516:67704): pid=280129 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015088.521:67705): pid=280129 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015088.884:67706): pid=280129 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015088.884:67707): pid=280129 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015088.888:67708): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015088.888:67709): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015088.903:67710): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015088.903:67711): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015088.905:67712): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=280134 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015088.935:67713): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015088.935:67714): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015089.850:67715): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015089.850:67716): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015089.852:67717): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=280151 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015089.884:67718): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015089.884:67719): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015089.904:67720): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015089.904:67721): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015089.906:67722): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=280167 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015089.946:67723): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015089.946:67724): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015089.985:67725): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015089.985:67726): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015089.987:67727): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=280189 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015090.051:67728): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015090.051:67729): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015090.066:67730): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015090.066:67731): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015090.068:67732): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=280205 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015090.105:67733): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015090.105:67734): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015090.139:67735): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015090.139:67736): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015090.141:67737): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=280222 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015090.384:67738): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015090.385:67739): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015090.404:67740): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015090.405:67741): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015090.406:67742): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=280242 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015090.444:67743): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015090.444:67744): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1765015090.474:67745): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015090.612:67746): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015090.804:67747): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015090.804:67748): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015090.805:67749): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=280281 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015090.840:67750): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015090.840:67751): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015090.853:67752): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015090.853:67753): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015090.855:67754): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=280297 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015090.897:67755): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015090.897:67756): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015090.930:67757): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015090.930:67758): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015090.933:67759): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=280320 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015090.998:67760): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015090.999:67761): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015091.019:67762): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015091.019:67763): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015091.022:67764): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=280336 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015091.063:67765): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015091.063:67766): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015091.079:67767): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015091.079:67768): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015091.081:67769): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=280372 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015091.372:67770): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015091.372:67771): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015091.396:67772): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015091.396:67773): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015091.399:67774): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=280394 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015091.437:67775): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015091.437:67776): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015091.710:67777): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015091.710:67778): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015091.711:67779): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=280412 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015091.740:67780): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015091.740:67781): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015091.752:67782): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015091.752:67783): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015091.754:67784): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=280428 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015091.803:67785): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015091.803:67786): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015091.830:67787): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015091.831:67788): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015091.832:67789): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=280469 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015091.887:67790): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015091.887:67791): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015091.906:67792): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015091.906:67793): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015091.908:67794): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=280485 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015091.944:67795): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015091.944:67796): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015091.962:67797): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015091.962:67798): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015091.964:67799): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=280502 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015092.224:67800): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015092.224:67801): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015092.247:67802): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015092.247:67803): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015092.248:67804): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=280524 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015092.277:67805): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015092.277:67806): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015092.649:67807): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015092.649:67808): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015092.650:67809): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=280541 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015092.685:67810): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015092.685:67811): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015092.699:67812): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015092.700:67813): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015092.701:67814): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=280557 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015092.742:67815): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015092.742:67816): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015092.917:67817): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015092.918:67818): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015092.920:67819): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=280579 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015092.980:67820): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015092.980:67821): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015092.998:67822): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015092.999:67823): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015093.000:67824): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=280595 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015093.036:67825): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015093.036:67826): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015093.053:67827): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015093.053:67828): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015093.055:67829): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=280612 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015093.121:67830): pid=280631 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015093.121:67831): pid=280631 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D696A747570787A656E656163627A6F6E6B70736D6C726263727A646E776976203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353039322E363837393334322D333838362D3136323432383331313837353334312F416E736962616C6C5A5F706F646D616E5F636F6E7461696E65722E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015093.121:67832): pid=280631 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015093.124:67833): pid=280631 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015093.523:67834): pid=280631 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015093.523:67835): pid=280631 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015093.528:67836): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015093.528:67837): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015093.558:67838): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015093.558:67839): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015093.560:67840): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=280656 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015093.590:67841): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015093.590:67842): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015093.843:67843): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015093.843:67844): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015093.845:67845): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=280673 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015093.879:67846): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015093.879:67847): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015093.899:67848): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015093.899:67849): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015093.901:67850): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=280689 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015093.939:67851): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015093.939:67852): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015094.011:67853): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015094.012:67854): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015094.013:67855): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=280711 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015094.107:67856): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015094.107:67857): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015094.123:67858): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015094.124:67859): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015094.125:67860): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=280727 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015094.158:67861): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015094.158:67862): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015094.181:67863): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015094.181:67864): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015094.183:67865): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=280744 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015094.246:67866): pid=280763 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015094.246:67867): pid=280763 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D697873726267797277687876696E736A6F676A64657A6E717276706A64776F65203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353039332E383831363638382D333930392D3232353033303632373733383238332F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015094.247:67868): pid=280763 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015094.250:67869): pid=280763 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1765015094.691:67870): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015094.815:67871): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015097.342:67872): pid=279834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=279834 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_START msg=audit(1765015097.729:67873): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015097.867:67874): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015099.976:67875): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1765015100.239:67876): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=edpm_nova_compute comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015100.363:67877): prog-id=2067 op=LOAD
type=SYSCALL msg=audit(1765015100.363:67877): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffe63c32080 a2=90 a3=9500000001 items=0 ppid=280865 pid=280866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015100.363:67877): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F333064346563366135643332383866316333353436383465633236353337
type=SERVICE_START msg=audit(1765015100.382:67878): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=edpm_nova_compute comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765015100.401:67879): pid=280870 uid=42436 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="nova" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="nova" AUID="unset"
type=USER_CMD msg=audit(1765015100.402:67880): pid=280870 uid=42436 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="nova" AUID="unset"
type=CRED_REFR msg=audit(1765015100.403:67881): pid=280870 uid=42436 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="nova" AUID="unset"
type=USER_START msg=audit(1765015100.404:67882): pid=280870 uid=42436 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="nova" AUID="unset"
type=USER_END msg=audit(1765015100.406:67883): pid=280763 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015100.407:67884): pid=280763 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015100.411:67885): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015100.411:67886): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015100.422:67887): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015100.422:67888): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015100.423:67889): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=280873 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015100.455:67890): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015100.455:67891): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765015100.485:67892): pid=280870 uid=42436 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="nova" AUID="unset"
type=CRED_DISP msg=audit(1765015100.485:67893): pid=280870 uid=42436 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="nova" AUID="unset"
type=USER_ACCT msg=audit(1765015100.502:67894): pid=280891 uid=42436 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="nova" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="nova" AUID="unset"
type=USER_CMD msg=audit(1765015100.502:67895): pid=280891 uid=42436 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_copy_cacerts" exe="/usr/bin/sudo" terminal=? res=success'UID="nova" AUID="unset"
type=CRED_REFR msg=audit(1765015100.503:67896): pid=280891 uid=42436 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="nova" AUID="unset"
type=USER_START msg=audit(1765015100.504:67897): pid=280891 uid=42436 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="nova" AUID="unset"
type=USER_END msg=audit(1765015100.508:67898): pid=280891 uid=42436 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="nova" AUID="unset"
type=CRED_DISP msg=audit(1765015100.508:67899): pid=280891 uid=42436 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="nova" AUID="unset"
type=USER_LOGIN msg=audit(1765015100.646:67900): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015100.646:67901): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015100.647:67902): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=280894 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015100.677:67903): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015100.677:67904): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015100.697:67905): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015100.697:67906): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015100.698:67907): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=280910 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015100.731:67908): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015100.731:67909): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015100.755:67910): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015100.755:67911): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015100.756:67912): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=280932 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015100.814:67913): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015100.815:67914): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015100.835:67915): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015100.835:67916): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015100.836:67917): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=280948 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015100.862:67918): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015100.862:67919): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015100.879:67920): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015100.880:67921): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015100.881:67922): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=280965 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015100.941:67923): pid=280984 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015100.942:67924): pid=280984 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A746C6B61706471787A74796C70717473726E6B6D65766B677164646B637776203B202F7573722F62696E2F707974686F6E332E39202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353130302E363738373331372D333933382D3136373439383531303739303332382F416E736962616C6C5A5F706F646D616E5F636F6E7461696E65722E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015100.942:67925): pid=280984 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015100.947:67926): pid=280984 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=BPF msg=audit(1765015101.493:67927): prog-id=2068 op=LOAD
type=SYSCALL msg=audit(1765015101.493:67927): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff7a5a10f0 a2=90 a3=9500000000 items=0 ppid=281027 pid=281028 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=59 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015101.493:67927): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F613339356462643061623539343330323637656336363462323131663839
type=BPF msg=audit(1765015101.587:67928): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765015101.648:67929): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015101.750:67930): pid=280984 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015101.750:67931): pid=280984 uid=1000 auid=1000 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015101.758:67932): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015101.758:67933): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765015101.802:67934): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015101.802:67935): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015101.803:67936): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=281095 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015101.838:67937): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015101.838:67938): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_STOP msg=audit(1765015101.862:67939): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015102.422:67940): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=262567 suid=1000 rport=55304 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.30 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015102.422:67941): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=262567 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015102.425:67942): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1765015102.426:67943): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.30 addr=192.168.122.30 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015102.426:67944): pid=262564 uid=0 auid=1000 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=262564 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1765015111.560:67945): pid=281185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=281185 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765015113.274:67946): pid=281184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=281185 suid=74 rport=46256 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765015113.274:67947): pid=281184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=281185 suid=74 rport=46256 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1765015113.472:67948): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1765015113.558:67949): pid=25982 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26003 suid=1002 rport=35892 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015113.558:67950): pid=25982 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26003 suid=1002 rport=35892 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015113.560:67951): pid=26021 uid=0 auid=1002 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26024 suid=1002 rport=35908 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015113.561:67952): pid=26021 uid=0 auid=1002 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26024 suid=1002 rport=35908 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015113.565:67953): pid=25999 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26005 suid=1002 rport=35902 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015113.565:67954): pid=25999 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26005 suid=1002 rport=35902 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015113.575:67955): pid=25982 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=26003 suid=1002 rport=35892 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015113.576:67956): pid=26021 uid=0 auid=1002 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=26024 suid=1002 rport=35908 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015113.578:67957): pid=25999 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=26005 suid=1002 rport=35902 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015113.586:67958): pid=25982 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=26003 suid=1002 rport=35892 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015113.590:67959): pid=26021 uid=0 auid=1002 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=26024 suid=1002 rport=35908 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015113.592:67960): pid=25999 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=26005 suid=1002 rport=35902 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=SERVICE_STOP msg=audit(1765015113.607:67961): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015118.476:67962): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015118.481:67963): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015118.680:67964): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015118.700:67965): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015120.312:67966): pid=281184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=281185 suid=74 rport=46256 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765015120.313:67967): pid=281184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=281185 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765015120.314:67968): pid=281184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=101.47.160.186 addr=101.47.160.186 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015120.315:67969): pid=281184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=281184 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765015120.315:67970): pid=281184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1765015120.469:67971): pid=26059 uid=0 auid=1002 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26062 suid=1002 rport=35924 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015120.470:67972): pid=26059 uid=0 auid=1002 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26062 suid=1002 rport=35924 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015120.474:67973): pid=26040 uid=0 auid=1002 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26043 suid=1002 rport=35912 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015120.474:67974): pid=26040 uid=0 auid=1002 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26043 suid=1002 rport=35912 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015120.478:67975): pid=26078 uid=0 auid=1002 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26081 suid=1002 rport=35932 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015120.478:67976): pid=26078 uid=0 auid=1002 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26081 suid=1002 rport=35932 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015120.489:67977): pid=26059 uid=0 auid=1002 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=26062 suid=1002 rport=35924 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015120.495:67978): pid=26040 uid=0 auid=1002 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=26043 suid=1002 rport=35912 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015120.500:67979): pid=26078 uid=0 auid=1002 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=26081 suid=1002 rport=35932 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015120.504:67980): pid=26059 uid=0 auid=1002 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=26062 suid=1002 rport=35924 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015120.509:67981): pid=26040 uid=0 auid=1002 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=26043 suid=1002 rport=35912 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015120.514:67982): pid=26078 uid=0 auid=1002 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=26081 suid=1002 rport=35932 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015120.547:67983): pid=26097 uid=0 auid=1002 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26100 suid=1002 rport=35938 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015120.547:67984): pid=26097 uid=0 auid=1002 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26100 suid=1002 rport=35938 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015120.556:67985): pid=26097 uid=0 auid=1002 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=26100 suid=1002 rport=35938 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015120.562:67986): pid=26097 uid=0 auid=1002 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=26100 suid=1002 rport=35938 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015120.573:67987): pid=26171 uid=0 auid=1002 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26174 suid=1002 rport=35978 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015120.573:67988): pid=26171 uid=0 auid=1002 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26174 suid=1002 rport=35978 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015120.578:67989): pid=26154 uid=0 auid=1002 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26157 suid=1002 rport=35966 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015120.578:67990): pid=26154 uid=0 auid=1002 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26157 suid=1002 rport=35966 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015120.579:67991): pid=26171 uid=0 auid=1002 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=26174 suid=1002 rport=35978 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015120.588:67992): pid=26154 uid=0 auid=1002 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=26157 suid=1002 rport=35966 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015120.589:67993): pid=26171 uid=0 auid=1002 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=26174 suid=1002 rport=35978 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015120.595:67994): pid=26154 uid=0 auid=1002 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=26157 suid=1002 rport=35966 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015120.598:67995): pid=26135 uid=0 auid=1002 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26138 suid=1002 rport=35950 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015120.599:67996): pid=26135 uid=0 auid=1002 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26138 suid=1002 rport=35950 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015120.606:67997): pid=26116 uid=0 auid=1002 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26119 suid=1002 rport=35940 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015120.607:67998): pid=26116 uid=0 auid=1002 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26119 suid=1002 rport=35940 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015120.620:67999): pid=26135 uid=0 auid=1002 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=26138 suid=1002 rport=35950 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015120.637:68000): pid=26116 uid=0 auid=1002 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=26119 suid=1002 rport=35940 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015120.641:68001): pid=26135 uid=0 auid=1002 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=26138 suid=1002 rport=35950 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015120.651:68002): pid=26116 uid=0 auid=1002 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=26119 suid=1002 rport=35940 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015121.280:68003): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26193 suid=1002 rport=35990 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_SESSION msg=audit(1765015121.280:68004): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp521 spid=26193 suid=1002 rport=35990 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015121.295:68005): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-client spid=26193 suid=1002 rport=35990 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015121.302:68006): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=from-server spid=26193 suid=1002 rport=35990 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_LOGIN msg=audit(1765015121.308:68007): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015121.308:68008): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015121.386:68009): pid=281244 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015121.387:68010): pid=281244 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015121.389:68011): pid=281244 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015121.400:68012): pid=281244 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765015121.401:68013): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015121.404:68014): pid=281244 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015121.404:68015): pid=281244 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015121.409:68016): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015121.409:68017): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015121.412:68018): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015121.412:68019): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015121.468:68020): pid=281268 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015121.468:68021): pid=281268 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015121.469:68022): pid=281268 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015121.476:68023): pid=281268 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_STOP msg=audit(1765015121.523:68024): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015122.086:68025): pid=281268 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015122.087:68026): pid=281268 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015122.199:68027): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015122.199:68028): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015123.348:68029): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015123.348:68030): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015123.414:68031): pid=281332 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015123.414:68032): pid=281332 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015123.415:68033): pid=281332 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015123.420:68034): pid=281332 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015123.424:68035): pid=281332 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015123.424:68036): pid=281332 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015123.428:68037): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015123.428:68038): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015125.472:68039): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015125.603:68040): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015128.471:68041): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015128.634:68042): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015132.474:68043): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015132.627:68044): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015144.473:68045): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015144.614:68046): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015149.485:68047): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015149.488:68048): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015149.598:68049): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015149.692:68050): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015152.490:68051): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015152.615:68052): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015156.472:68053): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015156.579:68054): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015159.471:68055): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015159.620:68056): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015163.478:68057): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015163.628:68058): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015175.473:68059): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015175.575:68060): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015180.474:68061): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015180.478:68062): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015180.622:68063): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015180.666:68064): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015183.458:68065): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015183.458:68066): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015183.490:68067): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765015183.529:68068): pid=281666 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015183.530:68069): pid=281666 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015183.530:68070): pid=281666 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015183.535:68071): pid=281666 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015183.538:68072): pid=281666 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015183.538:68073): pid=281666 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015183.546:68074): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015183.546:68075): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015183.574:68076): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015183.574:68077): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_STOP msg=audit(1765015183.616:68078): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765015183.632:68079): pid=281701 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015183.633:68080): pid=281701 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015183.635:68081): pid=281701 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015183.644:68082): pid=281701 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015184.324:68083): pid=281701 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015184.325:68084): pid=281701 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015184.473:68085): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015184.473:68086): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015184.535:68087): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015184.535:68088): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015184.607:68089): pid=281754 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015184.607:68090): pid=281754 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015184.608:68091): pid=281754 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015184.612:68092): pid=281754 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015184.615:68093): pid=281754 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015184.616:68094): pid=281754 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015184.621:68095): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015184.621:68096): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015184.631:68097): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015184.631:68098): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015184.700:68099): pid=281772 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015184.700:68100): pid=281772 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C6973742D6E6574776F726B73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015184.701:68101): pid=281772 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015184.704:68102): pid=281772 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015185.130:68103): pid=281772 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015185.131:68104): pid=281772 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015185.135:68105): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015185.135:68106): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015187.470:68107): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015187.584:68108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015188.178:68109): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015188.178:68110): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015188.237:68111): pid=281828 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015188.237:68112): pid=281828 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015188.238:68113): pid=281828 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015188.242:68114): pid=281828 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015188.245:68115): pid=281828 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015188.245:68116): pid=281828 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015188.249:68117): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015188.249:68118): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015190.479:68119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015190.595:68120): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015194.469:68121): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015194.678:68122): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015206.217:68123): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015206.335:68124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015211.476:68125): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015211.481:68126): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015211.578:68127): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015211.655:68128): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015214.474:68129): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015214.587:68130): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015218.473:68131): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015218.618:68132): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015221.471:68133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015221.606:68134): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015225.474:68135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015225.657:68136): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015236.479:68137): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015236.562:68138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015242.471:68139): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015242.474:68140): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015242.581:68141): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015242.648:68142): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015245.474:68143): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015245.617:68144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015248.275:68145): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015248.275:68146): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015248.341:68147): pid=282165 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015248.341:68148): pid=282165 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015248.343:68149): pid=282165 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015248.347:68150): pid=282165 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015248.350:68151): pid=282165 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015248.350:68152): pid=282165 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015248.358:68153): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015248.358:68154): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015248.375:68155): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015248.375:68156): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015248.436:68157): pid=282183 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015248.437:68158): pid=282183 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015248.437:68159): pid=282183 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015248.440:68160): pid=282183 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015249.052:68161): pid=282183 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015249.052:68162): pid=282183 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015249.162:68163): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015249.162:68164): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015249.472:68165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015249.617:68166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015252.143:68167): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015252.143:68168): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015252.205:68169): pid=282253 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015252.206:68170): pid=282253 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015252.207:68171): pid=282253 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015252.219:68172): pid=282253 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765015252.221:68173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015252.222:68174): pid=282253 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015252.222:68175): pid=282253 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015252.226:68176): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015252.226:68177): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_STOP msg=audit(1765015252.360:68178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015256.470:68179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015256.615:68180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015267.471:68181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015267.579:68182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015273.479:68183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015273.483:68184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015273.595:68185): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015273.658:68186): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015274.730:68187): pid=282390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=282390 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765015274.732:68188): pid=282389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=282390 suid=74 rport=60410 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765015274.732:68189): pid=282389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=282390 suid=74 rport=60410 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765015274.800:68190): pid=282389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765015274.813:68191): pid=282389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015274.813:68192): pid=282389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:e0:39:03:0c:58:11:ed:73:22:37:9b:fb:b5:96:ae:e6:c9:d5:b4:79:86:de:e9:6d:a3:5f:2e:d5:1c:00:d2:eb exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765015274.842:68193): pid=282389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015274.842:68194): pid=282389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=282390 suid=74 rport=60410 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765015274.844:68195): pid=282389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765015274.844:68196): pid=282389 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=61 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1765015274.844:68196): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffdae707180 a2=4 a3=3e8 items=0 ppid=182854 pid=282389 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=61 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015274.844:68196): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765015274.846:68197): pid=282389 uid=0 auid=1000 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1765015274.881:68198): pid=282389 uid=0 auid=1000 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015274.882:68199): pid=282392 uid=0 auid=1000 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=282392 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=CRED_ACQ msg=audit(1765015274.884:68200): pid=282392 uid=0 auid=1000 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1765015274.927:68201): pid=282389 uid=0 auid=1000 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765015274.927:68202): pid=282389 uid=0 auid=1000 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015274.929:68203): pid=282389 uid=0 auid=1000 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=282393 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765015274.993:68204): pid=282409 uid=1000 auid=1000 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765015274.993:68205): pid=282409 uid=1000 auid=1000 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75727574656476746F6861637975676661646C757664646B66687A696B6E6470203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765015274.995:68206): pid=282409 uid=1000 auid=1000 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765015274.999:68207): pid=282409 uid=1000 auid=1000 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1765015276.482:68208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015276.609:68209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015276.975:68210): pid=282409 uid=1000 auid=1000 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765015276.976:68211): pid=282409 uid=1000 auid=1000 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765015276.981:68212): pid=282389 uid=0 auid=1000 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765015276.981:68213): pid=282389 uid=0 auid=1000 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1765015280.483:68214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015280.591:68215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015282.472:68216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015282.578:68217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015287.474:68218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015287.622:68219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015298.470:68220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015298.598:68221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015304.782:68222): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015304.785:68223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015304.893:68224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015304.952:68225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015306.341:68226): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015306.341:68227): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015306.405:68228): pid=282604 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015306.405:68229): pid=282604 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015306.407:68230): pid=282604 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015306.411:68231): pid=282604 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015306.414:68232): pid=282604 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015306.415:68233): pid=282604 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015306.418:68234): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015306.418:68235): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015306.420:68236): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015306.420:68237): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015306.481:68238): pid=282622 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015306.481:68239): pid=282622 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F75742038393520636570682D766F6C756D65202D2D667369642031393339653835312D623130632D356333622D396262372D386537663338303233336538202D2D20696E76656E746F7279202D2D666F726D61743D6A736F6E2D707265747479202D2D66696C7465722D666F722D6261746368 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015306.482:68240): pid=282622 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015306.485:68241): pid=282622 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765015307.125:68242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015307.152:68243): prog-id=2069 op=LOAD
type=SYSCALL msg=audit(1765015307.152:68243): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff5e9f9760 a2=90 a3=9500000000 items=0 ppid=282696 pid=282700 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015307.152:68243): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F353435626231343666343131393562613563656131636364313365383939
type=BPF msg=audit(1765015307.204:68244): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1765015307.387:68245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015307.604:68246): prog-id=2070 op=LOAD
type=SYSCALL msg=audit(1765015307.604:68246): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffedaaef960 a2=90 a3=9500000001 items=0 ppid=282756 pid=282757 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015307.604:68246): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F623534383663643934366132346565643361646666653535633463653537
type=BPF msg=audit(1765015308.723:68247): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015308.853:68248): pid=282622 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015308.853:68249): pid=282622 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015308.857:68250): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015308.858:68251): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015309.444:68252): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015309.444:68253): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015309.518:68254): pid=284767 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015309.518:68255): pid=284767 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015309.519:68256): pid=284767 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015309.525:68257): pid=284767 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015309.529:68258): pid=284767 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015309.529:68259): pid=284767 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015309.533:68260): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015309.533:68261): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015309.560:68262): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015309.560:68263): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015309.631:68264): pid=284785 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015309.632:68265): pid=284785 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015309.633:68266): pid=284785 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015309.636:68267): pid=284785 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015309.639:68268): pid=284785 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015309.639:68269): pid=284785 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015309.651:68270): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015309.652:68271): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015309.677:68272): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015309.677:68273): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015309.752:68274): pid=284803 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015309.753:68275): pid=284803 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015309.753:68276): pid=284803 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015309.756:68277): pid=284803 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015310.385:68278): pid=284803 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015310.386:68279): pid=284803 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015310.533:68280): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015310.533:68281): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015311.104:68282): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015311.104:68283): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015311.169:68284): pid=284852 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015311.170:68285): pid=284852 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015311.170:68286): pid=284852 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015311.185:68287): pid=284852 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765015311.187:68288): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015311.189:68289): pid=284852 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015311.189:68290): pid=284852 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015311.195:68291): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015311.195:68292): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_STOP msg=audit(1765015311.327:68293): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015313.474:68294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015313.629:68295): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015314.657:68296): pid=284912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=284912 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765015314.658:68297): pid=284911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=284912 suid=74 rport=55102 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765015314.659:68298): pid=284911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=284912 suid=74 rport=55102 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765015314.737:68299): pid=284911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015314.737:68300): pid=284911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:e0:39:03:0c:58:11:ed:73:22:37:9b:fb:b5:96:ae:e6:c9:d5:b4:79:86:de:e9:6d:a3:5f:2e:d5:1c:00:d2:eb exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765015314.766:68301): pid=284911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015314.767:68302): pid=284911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=284912 suid=74 rport=55102 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765015314.769:68303): pid=284911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765015314.769:68304): pid=284911 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1003 tty=(none) old-ses=4294967295 ses=62 res=1UID="root" OLD-AUID="unset" AUID="tripleo-admin"
type=SYSCALL msg=audit(1765015314.769:68304): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffddaf2aaa0 a2=4 a3=3eb items=0 ppid=182854 pid=284911 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=62 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015314.769:68304): proctitle=737368643A20747269706C656F2D61646D696E205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765015314.771:68305): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765015314.830:68306): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1003 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765015314.882:68307): pid=284915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1765015314.882:68308): pid=284915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="tripleo-admin" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1765015314.883:68309): pid=284915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765015314.884:68310): pid=284915 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1003 tty=(none) old-ses=4294967295 ses=63 res=1UID="root" OLD-AUID="unset" AUID="tripleo-admin"
type=SYSCALL msg=audit(1765015314.884:68310): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7fff23b351c0 a2=4 a3=3eb items=0 ppid=1 pid=284915 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=63 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015314.884:68310): proctitle="(systemd)"
type=USER_START msg=audit(1765015314.887:68311): pid=284915 uid=0 auid=1003 ses=63 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="tripleo-admin" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765015315.036:68312): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1003 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765015315.066:68313): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015315.067:68314): pid=284931 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=284931 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="root"
type=CRED_ACQ msg=audit(1765015315.069:68315): pid=284931 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015315.114:68316): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015315.114:68317): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015315.116:68318): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=284932 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015315.147:68319): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015315.147:68320): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015315.164:68321): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015315.164:68322): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015315.165:68323): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=284948 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015315.204:68324): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015315.204:68325): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015315.223:68326): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015315.223:68327): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015315.225:68328): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=284970 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015315.262:68329): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015315.262:68330): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015315.277:68331): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015315.277:68332): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015315.279:68333): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=284988 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015315.370:68334): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015315.370:68335): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015315.396:68336): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015315.397:68337): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015315.398:68338): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=285005 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015315.452:68339): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015315.452:68340): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015315.469:68341): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015315.469:68342): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015315.471:68343): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=285021 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015315.508:68344): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015315.508:68345): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015315.528:68346): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015315.528:68347): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015315.531:68348): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=285038 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015315.603:68349): pid=285056 uid=1003 auid=1003 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015315.603:68350): pid=285056 uid=1003 auid=1003 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76697975787574796B6A666B7870696C697376736E777861616B6875766F6169203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353331352E313439333636362D36303038382D3231363535333230373735353234372F416E736962616C6C5A5F626C6F636B696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015315.604:68351): pid=285056 uid=1003 auid=1003 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015315.609:68352): pid=285056 uid=1003 auid=1003 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015315.772:68353): pid=285056 uid=1003 auid=1003 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015315.772:68354): pid=285056 uid=1003 auid=1003 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015315.776:68355): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015315.777:68356): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015315.803:68357): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015315.804:68358): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015315.805:68359): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=285060 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015315.835:68360): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015315.835:68361): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015315.925:68362): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015315.926:68363): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015315.927:68364): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=285077 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015315.957:68365): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015315.957:68366): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015315.976:68367): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015315.976:68368): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015315.978:68369): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=285093 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015316.019:68370): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015316.019:68371): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015316.043:68372): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015316.043:68373): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015316.044:68374): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=285115 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015316.081:68375): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015316.081:68376): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015316.102:68377): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015316.102:68378): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015316.103:68379): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=285133 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015316.193:68380): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015316.193:68381): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015316.222:68382): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015316.222:68383): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015316.224:68384): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=285150 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015316.291:68385): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015316.292:68386): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015316.305:68387): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015316.305:68388): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015316.306:68389): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=285166 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015316.341:68390): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015316.341:68391): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015316.363:68392): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015316.363:68393): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015316.366:68394): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=285183 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015316.436:68395): pid=285201 uid=1003 auid=1003 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015316.436:68396): pid=285201 uid=1003 auid=1003 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6262787976727A67686276776769786F6673747A6C68697964706669667A7464203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353331352E393630313837342D36303130322D37313031353938313431343631382F416E736962616C6C5A5F73797374656D642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015316.437:68397): pid=285201 uid=1003 auid=1003 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015316.442:68398): pid=285201 uid=1003 auid=1003 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765015317.734:68399): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=NETFILTER_CFG msg=audit(1765015317.840:68400): table=filter:15 family=10 entries=4 op=nft_unregister_table pid=285218 subj=system_u:system_r:iptables_t:s0 comm="nft"
type=NETFILTER_CFG msg=audit(1765015317.840:68400): table=raw:15 family=10 entries=3 op=nft_unregister_table pid=285218 subj=system_u:system_r:iptables_t:s0 comm="nft"
type=NETFILTER_CFG msg=audit(1765015317.840:68400): table=nat:15 family=2 entries=5 op=nft_unregister_table pid=285218 subj=system_u:system_r:iptables_t:s0 comm="nft"
type=NETFILTER_CFG msg=audit(1765015317.840:68400): table=raw:15 family=2 entries=3 op=nft_unregister_table pid=285218 subj=system_u:system_r:iptables_t:s0 comm="nft"
type=NETFILTER_CFG msg=audit(1765015317.840:68400): table=filter:15 family=2 entries=5 op=nft_unregister_table pid=285218 subj=system_u:system_r:iptables_t:s0 comm="nft"
type=NETFILTER_CFG msg=audit(1765015317.840:68400): table=nat:15 family=1 entries=5 op=nft_unregister_table pid=285218 subj=system_u:system_r:iptables_t:s0 comm="nft"
type=NETFILTER_CFG msg=audit(1765015317.840:68400): table=raw:15 family=1 entries=19 op=nft_unregister_table pid=285218 subj=system_u:system_r:iptables_t:s0 comm="nft"
type=NETFILTER_CFG msg=audit(1765015317.840:68400): table=filter:15 family=1 entries=43 op=nft_unregister_table pid=285218 subj=system_u:system_r:iptables_t:s0 comm="nft"
type=SYSCALL msg=audit(1765015317.840:68400): arch=c000003e syscall=46 success=yes exit=60 a0=3 a1=7fffbfc79000 a2=0 a3=7f294a093bc4 items=0 ppid=1 pid=285218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="nft" exe="/usr/sbin/nft" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015317.840:68400): proctitle=2F7362696E2F6E667400666C7573680072756C65736574
type=SERVICE_STOP msg=audit(1765015317.842:68401): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=nftables comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=NETFILTER_CFG msg=audit(1765015317.904:68402): table=filter:16 family=10 entries=4 op=nft_register_chain pid=285231 subj=system_u:system_r:iptables_t:s0 comm="nft"
type=NETFILTER_CFG msg=audit(1765015317.904:68402): table=raw:16 family=10 entries=3 op=nft_register_chain pid=285231 subj=system_u:system_r:iptables_t:s0 comm="nft"
type=NETFILTER_CFG msg=audit(1765015317.904:68402): table=nat:16 family=2 entries=5 op=nft_register_chain pid=285231 subj=system_u:system_r:iptables_t:s0 comm="nft"
type=NETFILTER_CFG msg=audit(1765015317.904:68402): table=raw:16 family=2 entries=3 op=nft_register_chain pid=285231 subj=system_u:system_r:iptables_t:s0 comm="nft"
type=NETFILTER_CFG msg=audit(1765015317.904:68402): table=filter:16 family=2 entries=4 op=nft_register_chain pid=285231 subj=system_u:system_r:iptables_t:s0 comm="nft"
type=NETFILTER_CFG msg=audit(1765015317.904:68402): table=nat:16 family=1 entries=5 op=nft_register_chain pid=285231 subj=system_u:system_r:iptables_t:s0 comm="nft"
type=NETFILTER_CFG msg=audit(1765015317.904:68402): table=raw:16 family=1 entries=9 op=nft_register_chain pid=285231 subj=system_u:system_r:iptables_t:s0 comm="nft"
type=NETFILTER_CFG msg=audit(1765015317.904:68402): table=filter:16 family=1 entries=54 op=nft_register_chain pid=285231 subj=system_u:system_r:iptables_t:s0 comm="nft"
type=SYSCALL msg=audit(1765015317.904:68402): arch=c000003e syscall=46 success=yes exit=15748 a0=3 a1=7ffc664bd2f0 a2=0 a3=7f688663ebc4 items=0 ppid=1 pid=285231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="nft" exe="/usr/sbin/nft" subj=system_u:system_r:iptables_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015317.904:68402): proctitle=2F7362696E2F6E6674002D66002F6574632F737973636F6E6669672F6E667461626C65732E636F6E66
type=SERVICE_START msg=audit(1765015317.907:68403): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=nftables comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015317.915:68404): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015317.928:68405): pid=285201 uid=1003 auid=1003 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015317.928:68406): pid=285201 uid=1003 auid=1003 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015317.933:68407): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015317.933:68408): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015317.956:68409): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015317.956:68410): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015317.958:68411): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=285235 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015317.995:68412): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015317.995:68413): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015320.745:68414): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015320.746:68415): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015320.810:68416): pid=285252 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015320.810:68417): pid=285252 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015320.811:68418): pid=285252 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015320.816:68419): pid=285252 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015320.819:68420): pid=285252 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015320.820:68421): pid=285252 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015320.824:68422): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015320.824:68423): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015322.082:68424): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015322.082:68425): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015322.141:68426): pid=285270 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015322.142:68427): pid=285270 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015322.142:68428): pid=285270 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015322.145:68429): pid=285270 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015322.148:68430): pid=285270 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015322.149:68431): pid=285270 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015322.153:68432): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015322.153:68433): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015323.246:68434): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015323.246:68435): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015323.309:68436): pid=285288 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015323.309:68437): pid=285288 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015323.310:68438): pid=285288 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015323.313:68439): pid=285288 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015323.316:68440): pid=285288 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015323.316:68441): pid=285288 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015323.320:68442): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015323.320:68443): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015324.640:68444): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015324.640:68445): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015324.700:68446): pid=285306 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015324.701:68447): pid=285306 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015324.701:68448): pid=285306 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015324.704:68449): pid=285306 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015324.707:68450): pid=285306 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015324.707:68451): pid=285306 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015324.711:68452): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015324.711:68453): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015325.860:68454): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015325.860:68455): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015325.924:68456): pid=285324 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015325.925:68457): pid=285324 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015325.925:68458): pid=285324 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015325.928:68459): pid=285324 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015325.932:68460): pid=285324 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015325.932:68461): pid=285324 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015325.937:68462): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015325.937:68463): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015327.132:68464): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015327.132:68465): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015327.181:68466): pid=285342 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015327.182:68467): pid=285342 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015327.182:68468): pid=285342 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015327.185:68469): pid=285342 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015327.189:68470): pid=285342 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015327.189:68471): pid=285342 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015327.193:68472): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015327.193:68473): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015328.187:68474): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015328.187:68475): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015328.247:68476): pid=285360 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015328.248:68477): pid=285360 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015328.248:68478): pid=285360 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015328.251:68479): pid=285360 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015328.254:68480): pid=285360 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015328.254:68481): pid=285360 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015328.258:68482): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015328.258:68483): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015328.261:68484): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015328.261:68485): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015328.323:68486): pid=285378 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015328.324:68487): pid=285378 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015328.324:68488): pid=285378 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015328.327:68489): pid=285378 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765015328.665:68490): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015328.816:68491): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015328.996:68492): prog-id=2071 op=LOAD
type=SYSCALL msg=audit(1765015328.996:68492): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffeea3517e0 a2=90 a3=9500000000 items=0 ppid=285470 pid=285471 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015328.996:68492): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F626235616635303135356332373462643766303464626465323463306233
type=BPF msg=audit(1765015329.047:68493): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015329.478:68494): prog-id=2072 op=LOAD
type=BPF msg=audit(1765015329.478:68495): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015329.483:68496): prog-id=2073 op=LOAD
type=BPF msg=audit(1765015329.483:68497): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015329.487:68498): prog-id=2074 op=LOAD
type=BPF msg=audit(1765015329.487:68499): prog-id=2075 op=LOAD
type=BPF msg=audit(1765015329.487:68500): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015329.487:68501): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015329.487:68502): prog-id=2076 op=LOAD
type=BPF msg=audit(1765015329.487:68503): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015329.488:68504): prog-id=2077 op=LOAD
type=BPF msg=audit(1765015329.488:68505): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015329.488:68506): prog-id=2078 op=LOAD
type=BPF msg=audit(1765015329.488:68507): prog-id=2079 op=LOAD
type=BPF msg=audit(1765015329.488:68508): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015329.488:68509): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015329.489:68510): prog-id=2080 op=LOAD
type=BPF msg=audit(1765015329.489:68511): prog-id=2081 op=LOAD
type=BPF msg=audit(1765015329.489:68512): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015329.489:68513): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015329.490:68514): prog-id=2082 op=LOAD
type=BPF msg=audit(1765015329.490:68515): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015329.490:68516): prog-id=2083 op=LOAD
type=BPF msg=audit(1765015329.491:68517): prog-id=2084 op=LOAD
type=BPF msg=audit(1765015329.491:68518): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015329.491:68519): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015329.896:68520): prog-id=2085 op=LOAD
type=BPF msg=audit(1765015329.896:68521): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015329.900:68522): prog-id=2086 op=LOAD
type=BPF msg=audit(1765015329.900:68523): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015329.904:68524): prog-id=2087 op=LOAD
type=BPF msg=audit(1765015329.904:68525): prog-id=2088 op=LOAD
type=BPF msg=audit(1765015329.904:68526): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015329.904:68527): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015329.905:68528): prog-id=2089 op=LOAD
type=BPF msg=audit(1765015329.905:68529): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015329.905:68530): prog-id=2090 op=LOAD
type=BPF msg=audit(1765015329.905:68531): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015329.905:68532): prog-id=2091 op=LOAD
type=BPF msg=audit(1765015329.905:68533): prog-id=2092 op=LOAD
type=BPF msg=audit(1765015329.905:68534): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015329.905:68535): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015329.907:68536): prog-id=2093 op=LOAD
type=BPF msg=audit(1765015329.907:68537): prog-id=2094 op=LOAD
type=BPF msg=audit(1765015329.907:68538): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015329.907:68539): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015329.908:68540): prog-id=2095 op=LOAD
type=BPF msg=audit(1765015329.908:68541): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015329.908:68542): prog-id=2096 op=LOAD
type=BPF msg=audit(1765015329.908:68543): prog-id=2097 op=LOAD
type=BPF msg=audit(1765015329.908:68544): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015329.908:68545): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015330.339:68546): prog-id=2098 op=LOAD
type=SYSCALL msg=audit(1765015330.339:68546): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffddb8cce90 a2=90 a3=9500000000 items=0 ppid=285631 pid=285632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015330.339:68546): proctitle=2F7573722F62696E2F6372756E002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F6339646631623362383839656533653164643462333630643537313730313562623964376361646336376533323861
type=SERVICE_START msg=audit(1765015330.367:68547): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ceph-1939e851-b10c-5c3b-9bb7-8e7f380233e8@mds.mds.np0005548790.vhcezv comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015330.412:68548): pid=285378 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015330.412:68549): pid=285378 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015330.418:68550): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015330.418:68551): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015335.476:68552): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015335.481:68553): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015335.651:68554): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015335.682:68555): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015335.711:68556): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015335.711:68557): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015335.774:68558): pid=285695 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015335.774:68559): pid=285695 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015335.775:68560): pid=285695 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015335.780:68561): pid=285695 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015335.783:68562): pid=285695 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015335.784:68563): pid=285695 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015335.788:68564): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015335.788:68565): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015335.801:68566): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015335.801:68567): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015335.861:68568): pid=285713 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015335.862:68569): pid=285713 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015335.862:68570): pid=285713 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015335.865:68571): pid=285713 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015335.867:68572): pid=285713 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015335.868:68573): pid=285713 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015335.873:68574): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015335.873:68575): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015335.887:68576): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015335.887:68577): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015335.947:68578): pid=285731 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015335.948:68579): pid=285731 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015335.948:68580): pid=285731 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015335.950:68581): pid=285731 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015337.042:68582): pid=282389 uid=0 auid=1000 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=282392 suid=1000 rport=60410 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015337.043:68583): pid=282389 uid=0 auid=1000 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=282392 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765015337.047:68584): pid=282389 uid=0 auid=1000 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1765015337.047:68585): pid=282389 uid=0 auid=1000 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765015337.048:68586): pid=282389 uid=0 auid=1000 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=282389 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=USER_END msg=audit(1765015337.175:68587): pid=285731 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015337.176:68588): pid=285731 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015337.181:68589): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015337.181:68590): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015337.474:68591): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015337.599:68592): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015337.840:68593): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015337.840:68594): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015337.902:68595): pid=285923 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015337.902:68596): pid=285923 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015337.903:68597): pid=285923 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015337.909:68598): pid=285923 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015337.912:68599): pid=285923 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015337.913:68600): pid=285923 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015337.916:68601): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015337.916:68602): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015338.323:68603): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015338.323:68604): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015338.385:68605): pid=285941 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015338.386:68606): pid=285941 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015338.387:68607): pid=285941 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015338.390:68608): pid=285941 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015338.393:68609): pid=285941 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015338.393:68610): pid=285941 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015338.397:68611): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015338.397:68612): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015341.471:68613): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015341.589:68614): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015344.471:68615): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015344.584:68616): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015348.472:68617): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015348.682:68618): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015359.472:68619): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015359.593:68620): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015366.475:68621): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015366.479:68622): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015366.620:68623): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015366.651:68624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015368.474:68625): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015368.597:68626): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015372.470:68627): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015372.593:68628): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015375.474:68629): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015375.590:68630): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015377.376:68631): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=284931 suid=1003 rport=55102 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015377.376:68632): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=284931 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015377.379:68633): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015377.380:68634): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015377.380:68635): pid=284911 uid=0 auid=1003 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=284911 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="root"
type=SERVICE_START msg=audit(1765015379.475:68636): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015379.678:68637): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015387.476:68638): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1003 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015387.514:68639): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1003 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015388.295:68640): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015388.295:68641): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015388.360:68642): pid=286229 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015388.360:68643): pid=286229 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015388.361:68644): pid=286229 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015388.366:68645): pid=286229 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015388.369:68646): pid=286229 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015388.370:68647): pid=286229 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015388.374:68648): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015388.374:68649): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015388.396:68650): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015388.396:68651): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015388.463:68652): pid=286247 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015388.463:68653): pid=286247 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015388.464:68654): pid=286247 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015388.467:68655): pid=286247 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015388.469:68656): pid=286247 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015388.470:68657): pid=286247 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015388.496:68658): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015388.496:68659): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015388.514:68660): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015388.514:68661): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015388.579:68662): pid=286265 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015388.579:68663): pid=286265 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015388.580:68664): pid=286265 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015388.582:68665): pid=286265 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015389.298:68666): pid=286265 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015389.298:68667): pid=286265 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015389.422:68668): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015389.423:68669): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015390.469:68670): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015390.623:68671): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015391.513:68672): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015391.513:68673): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015391.577:68674): pid=286332 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015391.578:68675): pid=286332 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015391.579:68676): pid=286332 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015391.582:68677): pid=286332 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015391.585:68678): pid=286332 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015391.586:68679): pid=286332 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015391.590:68680): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015391.590:68681): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015392.040:68682): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015392.040:68683): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015392.102:68684): pid=286350 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015392.102:68685): pid=286350 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015392.102:68686): pid=286350 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015392.105:68687): pid=286350 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015392.109:68688): pid=286350 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015392.109:68689): pid=286350 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015392.113:68690): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015392.113:68691): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015397.479:68692): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015397.483:68693): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015397.617:68694): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015397.656:68695): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015399.472:68696): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015399.601:68697): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015403.471:68698): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015403.625:68699): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015406.478:68700): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015406.587:68701): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015410.470:68702): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015410.647:68703): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015413.082:68704): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015413.082:68705): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015413.151:68706): pid=286542 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015413.151:68707): pid=286542 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015413.151:68708): pid=286542 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015413.156:68709): pid=286542 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015413.159:68710): pid=286542 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015413.159:68711): pid=286542 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015413.164:68712): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015413.164:68713): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015413.170:68714): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015413.171:68715): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015413.235:68716): pid=286560 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015413.236:68717): pid=286560 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F75742038393520636865636B2D686F7374 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015413.236:68718): pid=286560 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015413.239:68719): pid=286560 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015413.691:68720): pid=286560 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015413.692:68721): pid=286560 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015413.698:68722): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015413.698:68723): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015414.268:68724): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015414.268:68725): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015414.333:68726): pid=286599 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015414.334:68727): pid=286599 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015414.334:68728): pid=286599 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015414.338:68729): pid=286599 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015414.341:68730): pid=286599 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015414.341:68731): pid=286599 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015414.345:68732): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015414.345:68733): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015414.850:68734): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015414.850:68735): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015414.918:68736): pid=286617 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015414.918:68737): pid=286617 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015414.919:68738): pid=286617 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015414.922:68739): pid=286617 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015414.926:68740): pid=286617 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015414.926:68741): pid=286617 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015414.929:68742): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015414.929:68743): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015416.212:68744): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015416.212:68745): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015416.280:68746): pid=286635 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015416.281:68747): pid=286635 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015416.281:68748): pid=286635 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015416.284:68749): pid=286635 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015416.288:68750): pid=286635 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015416.288:68751): pid=286635 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015416.292:68752): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015416.292:68753): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015421.476:68754): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015421.627:68755): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015421.952:68756): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015421.952:68757): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015422.017:68758): pid=286671 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015422.017:68759): pid=286671 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015422.018:68760): pid=286671 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015422.021:68761): pid=286671 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015422.025:68762): pid=286671 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015422.025:68763): pid=286671 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015422.030:68764): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015422.030:68765): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015422.033:68766): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015422.033:68767): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015422.101:68768): pid=286689 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015422.102:68769): pid=286689 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015422.102:68770): pid=286689 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015422.105:68771): pid=286689 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015422.738:68772): prog-id=2099 op=LOAD
type=SYSCALL msg=audit(1765015422.738:68772): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff14528230 a2=90 a3=9500000000 items=0 ppid=286765 pid=286766 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015422.738:68772): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F643065653034343064366562326334356166393736343332313634313639
type=BPF msg=audit(1765015422.792:68773): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015423.265:68774): prog-id=2100 op=LOAD
type=BPF msg=audit(1765015423.265:68775): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015423.269:68776): prog-id=2101 op=LOAD
type=BPF msg=audit(1765015423.269:68777): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015423.273:68778): prog-id=2102 op=LOAD
type=BPF msg=audit(1765015423.273:68779): prog-id=2103 op=LOAD
type=BPF msg=audit(1765015423.273:68780): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015423.273:68781): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015423.274:68782): prog-id=2104 op=LOAD
type=BPF msg=audit(1765015423.274:68783): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015423.275:68784): prog-id=2105 op=LOAD
type=BPF msg=audit(1765015423.275:68785): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015423.275:68786): prog-id=2106 op=LOAD
type=BPF msg=audit(1765015423.275:68787): prog-id=2107 op=LOAD
type=BPF msg=audit(1765015423.275:68788): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015423.275:68789): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015423.276:68790): prog-id=2108 op=LOAD
type=BPF msg=audit(1765015423.276:68791): prog-id=2109 op=LOAD
type=BPF msg=audit(1765015423.276:68792): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015423.276:68793): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015423.277:68794): prog-id=2110 op=LOAD
type=BPF msg=audit(1765015423.277:68795): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015423.277:68796): prog-id=2111 op=LOAD
type=BPF msg=audit(1765015423.277:68797): prog-id=2112 op=LOAD
type=BPF msg=audit(1765015423.277:68798): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015423.277:68799): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015423.616:68800): prog-id=2113 op=LOAD
type=BPF msg=audit(1765015423.616:68801): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015423.620:68802): prog-id=2114 op=LOAD
type=BPF msg=audit(1765015423.620:68803): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015423.624:68804): prog-id=2115 op=LOAD
type=BPF msg=audit(1765015423.624:68805): prog-id=2116 op=LOAD
type=BPF msg=audit(1765015423.624:68806): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015423.624:68807): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015423.625:68808): prog-id=2117 op=LOAD
type=BPF msg=audit(1765015423.625:68809): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015423.626:68810): prog-id=2118 op=LOAD
type=BPF msg=audit(1765015423.626:68811): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015423.626:68812): prog-id=2119 op=LOAD
type=BPF msg=audit(1765015423.626:68813): prog-id=2120 op=LOAD
type=BPF msg=audit(1765015423.626:68814): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015423.626:68815): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015423.627:68816): prog-id=2121 op=LOAD
type=BPF msg=audit(1765015423.628:68817): prog-id=2122 op=LOAD
type=BPF msg=audit(1765015423.628:68818): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015423.628:68819): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015423.628:68820): prog-id=2123 op=LOAD
type=BPF msg=audit(1765015423.628:68821): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015423.629:68822): prog-id=2124 op=LOAD
type=BPF msg=audit(1765015423.629:68823): prog-id=2125 op=LOAD
type=BPF msg=audit(1765015423.629:68824): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015423.629:68825): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015424.097:68826): prog-id=2126 op=LOAD
type=SYSCALL msg=audit(1765015424.097:68826): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc940f7400 a2=90 a3=9500000000 items=0 ppid=286930 pid=286931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015424.097:68826): proctitle=2F7573722F62696E2F6372756E002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F6234643234313838636631316431613634376233303965323266643736333062313364613366656164653335633166
type=SERVICE_START msg=audit(1765015424.127:68827): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ceph-1939e851-b10c-5c3b-9bb7-8e7f380233e8@mgr.np0005548790.kvkfyr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015424.156:68828): pid=286689 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015424.157:68829): pid=286689 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015424.165:68830): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015424.165:68831): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015424.702:68832): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015424.702:68833): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015424.770:68834): pid=286959 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015424.770:68835): pid=286959 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015424.771:68836): pid=286959 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015424.776:68837): pid=286959 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015424.780:68838): pid=286959 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015424.780:68839): pid=286959 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015424.784:68840): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015424.784:68841): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015424.797:68842): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015424.797:68843): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015424.862:68844): pid=286981 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015424.862:68845): pid=286981 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015424.864:68846): pid=286981 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015424.866:68847): pid=286981 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015424.869:68848): pid=286981 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015424.869:68849): pid=286981 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015424.873:68850): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015424.874:68851): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015424.878:68852): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015424.878:68853): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015424.945:68854): pid=287000 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015424.945:68855): pid=287000 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015424.946:68856): pid=287000 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015424.948:68857): pid=287000 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015426.465:68858): pid=287000 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015426.466:68859): pid=287000 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015426.474:68860): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015426.474:68861): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015426.954:68862): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015426.954:68863): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015427.020:68864): pid=287190 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015427.020:68865): pid=287190 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015427.021:68866): pid=287190 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015427.024:68867): pid=287190 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015427.027:68868): pid=287190 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015427.027:68869): pid=287190 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015427.031:68870): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015427.031:68871): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015427.492:68872): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015427.492:68873): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015427.560:68874): pid=287208 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015427.560:68875): pid=287208 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015427.561:68876): pid=287208 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015427.564:68877): pid=287208 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015427.567:68878): pid=287208 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015427.568:68879): pid=287208 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015427.572:68880): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015427.572:68881): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015428.483:68882): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015428.488:68883): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015428.680:68884): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015428.727:68885): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015428.796:68886): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015428.796:68887): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015428.862:68888): pid=287266 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015428.862:68889): pid=287266 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015428.863:68890): pid=287266 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015428.868:68891): pid=287266 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015428.872:68892): pid=287266 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015428.872:68893): pid=287266 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015428.877:68894): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015428.877:68895): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015430.472:68896): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015430.627:68897): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015432.918:68898): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015432.918:68899): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015432.985:68900): pid=287305 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015432.985:68901): pid=287305 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015432.986:68902): pid=287305 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015432.989:68903): pid=287305 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015432.994:68904): pid=287305 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015432.994:68905): pid=287305 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015432.998:68906): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015432.998:68907): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015434.472:68908): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015434.611:68909): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015436.208:68910): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015436.208:68911): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015436.276:68912): pid=287343 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015436.276:68913): pid=287343 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015436.277:68914): pid=287343 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015436.280:68915): pid=287343 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015436.284:68916): pid=287343 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015436.284:68917): pid=287343 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015436.289:68918): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015436.289:68919): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015436.302:68920): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015436.302:68921): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015436.362:68922): pid=287361 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015436.362:68923): pid=287361 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015436.362:68924): pid=287361 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015436.365:68925): pid=287361 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015436.369:68926): pid=287361 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015436.369:68927): pid=287361 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015436.374:68928): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015436.374:68929): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015436.377:68930): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015436.377:68931): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015436.442:68932): pid=287379 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015436.442:68933): pid=287379 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015436.443:68934): pid=287379 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015436.446:68935): pid=287379 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015436.450:68936): pid=287379 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015436.450:68937): pid=287379 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015436.455:68938): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015436.455:68939): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015436.459:68940): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015436.459:68941): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015436.520:68942): pid=287397 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015436.520:68943): pid=287397 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015436.521:68944): pid=287397 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015436.523:68945): pid=287397 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015436.526:68946): pid=287397 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015436.527:68947): pid=287397 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015436.532:68948): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015436.532:68949): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015436.536:68950): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015436.536:68951): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015436.596:68952): pid=287415 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015436.596:68953): pid=287415 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015436.597:68954): pid=287415 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015436.605:68955): pid=287415 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765015436.608:68956): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015436.610:68957): pid=287415 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015436.610:68958): pid=287415 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015436.615:68959): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015436.615:68960): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015436.619:68961): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015436.619:68962): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015436.677:68963): pid=287439 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015436.677:68964): pid=287439 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015436.677:68965): pid=287439 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015436.679:68966): pid=287439 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015436.682:68967): pid=287439 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015436.682:68968): pid=287439 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015436.687:68969): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015436.687:68970): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015436.691:68971): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015436.691:68972): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_STOP msg=audit(1765015436.727:68973): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015436.748:68974): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015436.748:68975): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015436.751:68976): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015436.751:68977): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015436.803:68978): pid=287490 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015436.803:68979): pid=287490 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015436.804:68980): pid=287490 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015436.807:68981): pid=287490 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015436.812:68982): pid=287490 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015436.812:68983): pid=287490 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015436.818:68984): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015436.818:68985): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015436.821:68986): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015436.822:68987): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015436.878:68988): pid=287508 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015436.878:68989): pid=287508 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015436.879:68990): pid=287508 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015436.883:68991): pid=287508 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015436.886:68992): pid=287508 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015436.886:68993): pid=287508 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015436.891:68994): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015436.891:68995): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015436.895:68996): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015436.895:68997): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015436.950:68998): pid=287526 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015436.950:68999): pid=287526 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577202F6574632F636570682F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015436.951:69000): pid=287526 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015436.954:69001): pid=287526 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015436.956:69002): pid=287526 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015436.957:69003): pid=287526 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015436.961:69004): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015436.961:69005): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015436.965:69006): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015436.965:69007): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015437.033:69008): pid=287544 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015437.033:69009): pid=287544 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015437.034:69010): pid=287544 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015437.036:69011): pid=287544 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015437.040:69012): pid=287544 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015437.040:69013): pid=287544 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015437.046:69014): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015437.046:69015): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015437.050:69016): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015437.050:69017): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015437.115:69018): pid=287562 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015437.115:69019): pid=287562 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015437.116:69020): pid=287562 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015437.119:69021): pid=287562 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015437.122:69022): pid=287562 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015437.123:69023): pid=287562 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015437.128:69024): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015437.128:69025): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015437.132:69026): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015437.132:69027): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015437.198:69028): pid=287580 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015437.198:69029): pid=287580 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015437.199:69030): pid=287580 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015437.202:69031): pid=287580 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015437.206:69032): pid=287580 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015437.206:69033): pid=287580 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015437.212:69034): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015437.212:69035): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015437.220:69036): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015437.220:69037): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015437.288:69038): pid=287598 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015437.289:69039): pid=287598 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015437.290:69040): pid=287598 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015437.292:69041): pid=287598 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015437.296:69042): pid=287598 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015437.297:69043): pid=287598 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015437.302:69044): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015437.302:69045): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015437.305:69046): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015437.305:69047): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015437.372:69048): pid=287616 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015437.372:69049): pid=287616 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015437.373:69050): pid=287616 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015437.375:69051): pid=287616 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015437.378:69052): pid=287616 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015437.379:69053): pid=287616 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015437.384:69054): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015437.384:69055): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015437.387:69056): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015437.387:69057): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765015437.440:69058): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015437.440:69059): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015437.443:69060): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015437.443:69061): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015437.494:69062): pid=287650 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015437.494:69063): pid=287650 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015437.494:69064): pid=287650 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015437.497:69065): pid=287650 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015437.503:69066): pid=287650 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015437.503:69067): pid=287650 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015437.509:69068): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015437.509:69069): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015437.513:69070): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015437.513:69071): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015437.578:69072): pid=287668 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015437.578:69073): pid=287668 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015437.578:69074): pid=287668 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015437.581:69075): pid=287668 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015437.584:69076): pid=287668 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015437.585:69077): pid=287668 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015437.590:69078): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015437.590:69079): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015437.595:69080): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015437.595:69081): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015437.662:69082): pid=287686 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015437.662:69083): pid=287686 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015437.663:69084): pid=287686 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015437.665:69085): pid=287686 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015437.669:69086): pid=287686 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015437.669:69087): pid=287686 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015437.675:69088): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015437.675:69089): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015437.680:69090): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015437.680:69091): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015437.747:69092): pid=287704 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015437.747:69093): pid=287704 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015437.748:69094): pid=287704 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015437.751:69095): pid=287704 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015437.754:69096): pid=287704 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015437.755:69097): pid=287704 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015437.760:69098): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015437.760:69099): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015437.763:69100): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015437.763:69101): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015437.829:69102): pid=287722 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015437.830:69103): pid=287722 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015437.830:69104): pid=287722 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015437.833:69105): pid=287722 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015437.836:69106): pid=287722 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015437.836:69107): pid=287722 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015437.841:69108): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015437.841:69109): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015437.844:69110): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015437.844:69111): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015437.905:69112): pid=287740 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015437.906:69113): pid=287740 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015437.906:69114): pid=287740 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015437.909:69115): pid=287740 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015437.911:69116): pid=287740 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015437.912:69117): pid=287740 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015437.916:69118): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015437.916:69119): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015437.919:69120): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015437.919:69121): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015437.989:69122): pid=287758 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015437.989:69123): pid=287758 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015437.990:69124): pid=287758 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015437.993:69125): pid=287758 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015437.996:69126): pid=287758 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015437.997:69127): pid=287758 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015438.002:69128): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015438.002:69129): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015438.005:69130): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015438.006:69131): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015438.058:69132): pid=287776 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015438.058:69133): pid=287776 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015438.059:69134): pid=287776 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015438.063:69135): pid=287776 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015438.066:69136): pid=287776 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015438.066:69137): pid=287776 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015438.071:69138): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015438.071:69139): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015438.074:69140): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015438.074:69141): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765015438.127:69142): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015438.127:69143): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015438.130:69144): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015438.130:69145): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015438.178:69146): pid=287810 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015438.178:69147): pid=287810 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015438.179:69148): pid=287810 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015438.181:69149): pid=287810 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015438.187:69150): pid=287810 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015438.187:69151): pid=287810 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015438.229:69152): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015438.229:69153): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015438.231:69154): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015438.231:69155): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015438.295:69156): pid=287828 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015438.295:69157): pid=287828 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363030202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015438.296:69158): pid=287828 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015438.298:69159): pid=287828 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015438.301:69160): pid=287828 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015438.301:69161): pid=287828 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015438.306:69162): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015438.306:69163): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015438.309:69164): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015438.309:69165): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015438.364:69166): pid=287846 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015438.364:69167): pid=287846 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577202F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E67 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015438.365:69168): pid=287846 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015438.367:69169): pid=287846 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015438.371:69170): pid=287846 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015438.371:69171): pid=287846 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015438.377:69172): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015438.377:69173): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015438.381:69174): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015438.381:69175): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015438.451:69176): pid=287864 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015438.451:69177): pid=287864 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015438.452:69178): pid=287864 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015438.455:69179): pid=287864 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015438.459:69180): pid=287864 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015438.459:69181): pid=287864 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015438.464:69182): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015438.464:69183): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015438.467:69184): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015438.467:69185): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015438.532:69186): pid=287882 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015438.532:69187): pid=287882 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015438.533:69188): pid=287882 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015438.536:69189): pid=287882 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015438.540:69190): pid=287882 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015438.540:69191): pid=287882 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015438.545:69192): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015438.545:69193): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015438.548:69194): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015438.548:69195): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015438.619:69196): pid=287900 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015438.619:69197): pid=287900 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015438.620:69198): pid=287900 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015438.623:69199): pid=287900 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015438.627:69200): pid=287900 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015438.628:69201): pid=287900 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015438.633:69202): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015438.633:69203): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015438.637:69204): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015438.637:69205): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015438.701:69206): pid=287918 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015438.702:69207): pid=287918 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015438.702:69208): pid=287918 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015438.705:69209): pid=287918 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015438.709:69210): pid=287918 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015438.709:69211): pid=287918 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015438.715:69212): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015438.715:69213): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015438.719:69214): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015438.719:69215): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015438.786:69216): pid=287936 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015438.787:69217): pid=287936 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015438.787:69218): pid=287936 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015438.790:69219): pid=287936 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015438.793:69220): pid=287936 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015438.794:69221): pid=287936 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015438.799:69222): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015438.799:69223): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015438.802:69224): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015438.802:69225): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765015438.856:69226): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015438.857:69227): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015438.860:69228): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015438.860:69229): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015438.926:69230): pid=287970 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015438.927:69231): pid=287970 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015438.927:69232): pid=287970 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015438.930:69233): pid=287970 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015438.937:69234): pid=287970 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015438.937:69235): pid=287970 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015438.943:69236): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015438.943:69237): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015438.946:69238): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015438.946:69239): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015439.011:69240): pid=287988 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015439.011:69241): pid=287988 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363030202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015439.012:69242): pid=287988 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015439.015:69243): pid=287988 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015439.018:69244): pid=287988 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015439.018:69245): pid=287988 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015439.023:69246): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015439.023:69247): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015439.026:69248): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015439.026:69249): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015439.092:69250): pid=288006 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015439.093:69251): pid=288006 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E67 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015439.093:69252): pid=288006 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015439.096:69253): pid=288006 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015439.099:69254): pid=288006 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015439.099:69255): pid=288006 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015439.104:69256): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015439.104:69257): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015439.169:69258): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015439.169:69259): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015439.230:69260): pid=288024 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015439.231:69261): pid=288024 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015439.231:69262): pid=288024 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015439.233:69263): pid=288024 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015439.235:69264): pid=288024 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015439.235:69265): pid=288024 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015439.239:69266): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015439.239:69267): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015439.242:69268): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015439.242:69269): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015439.288:69270): pid=288042 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015439.288:69271): pid=288042 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935205F6F726368206465706C6F79202D2D667369642031393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015439.289:69272): pid=288042 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015439.290:69273): pid=288042 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015439.951:69274): prog-id=2127 op=LOAD
type=SYSCALL msg=audit(1765015439.951:69274): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd49002520 a2=90 a3=9500000000 items=0 ppid=288119 pid=288120 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015439.951:69274): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F333134303563326633313862386439653664616130653630663034346430
type=BPF msg=audit(1765015439.997:69275): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015440.288:69276): prog-id=2128 op=LOAD
type=SYSCALL msg=audit(1765015440.288:69276): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffffdd7de70 a2=90 a3=9500000000 items=0 ppid=288155 pid=288156 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015440.288:69276): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F633832376632643938646531306436343233313339393465356163363935
type=BPF msg=audit(1765015440.428:69277): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015440.882:69278): prog-id=2129 op=LOAD
type=BPF msg=audit(1765015440.882:69279): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015440.886:69280): prog-id=2130 op=LOAD
type=BPF msg=audit(1765015440.886:69281): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015440.890:69282): prog-id=2131 op=LOAD
type=BPF msg=audit(1765015440.890:69283): prog-id=2132 op=LOAD
type=BPF msg=audit(1765015440.890:69284): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015440.890:69285): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015440.891:69286): prog-id=2133 op=LOAD
type=BPF msg=audit(1765015440.891:69287): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015440.892:69288): prog-id=2134 op=LOAD
type=BPF msg=audit(1765015440.892:69289): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015440.892:69290): prog-id=2135 op=LOAD
type=BPF msg=audit(1765015440.892:69291): prog-id=2136 op=LOAD
type=BPF msg=audit(1765015440.892:69292): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015440.892:69293): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015440.893:69294): prog-id=2137 op=LOAD
type=BPF msg=audit(1765015440.893:69295): prog-id=2138 op=LOAD
type=BPF msg=audit(1765015440.893:69296): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015440.893:69297): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015440.894:69298): prog-id=2139 op=LOAD
type=BPF msg=audit(1765015440.894:69299): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015440.894:69300): prog-id=2140 op=LOAD
type=BPF msg=audit(1765015440.894:69301): prog-id=2141 op=LOAD
type=BPF msg=audit(1765015440.894:69302): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015440.894:69303): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765015440.908:69304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015441.292:69305): prog-id=2142 op=LOAD
type=BPF msg=audit(1765015441.292:69306): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015441.296:69307): prog-id=2143 op=LOAD
type=BPF msg=audit(1765015441.296:69308): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015441.300:69309): prog-id=2144 op=LOAD
type=BPF msg=audit(1765015441.300:69310): prog-id=2145 op=LOAD
type=BPF msg=audit(1765015441.300:69311): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015441.300:69312): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015441.301:69313): prog-id=2146 op=LOAD
type=BPF msg=audit(1765015441.301:69314): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015441.302:69315): prog-id=2147 op=LOAD
type=BPF msg=audit(1765015441.302:69316): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015441.302:69317): prog-id=2148 op=LOAD
type=BPF msg=audit(1765015441.302:69318): prog-id=2149 op=LOAD
type=BPF msg=audit(1765015441.302:69319): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015441.302:69320): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015441.304:69321): prog-id=2150 op=LOAD
type=BPF msg=audit(1765015441.304:69322): prog-id=2151 op=LOAD
type=BPF msg=audit(1765015441.304:69323): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015441.304:69324): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015441.305:69325): prog-id=2152 op=LOAD
type=BPF msg=audit(1765015441.305:69326): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015441.305:69327): prog-id=2153 op=LOAD
type=BPF msg=audit(1765015441.305:69328): prog-id=2154 op=LOAD
type=BPF msg=audit(1765015441.305:69329): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015441.305:69330): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1765015441.316:69331): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015441.777:69332): prog-id=2155 op=LOAD
type=SYSCALL msg=audit(1765015441.777:69332): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffeb428ff80 a2=90 a3=9500000001 items=0 ppid=288369 pid=288370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015441.777:69332): proctitle=2F7573722F62696E2F6372756E002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F6332663739643630323039376466616161376338333031323033323530653639313632383634383336333266316361
type=SERVICE_START msg=audit(1765015441.806:69333): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ceph-1939e851-b10c-5c3b-9bb7-8e7f380233e8@mon.np0005548790 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015441.856:69334): pid=288042 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015441.856:69335): pid=288042 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015441.862:69336): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015441.862:69337): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015452.479:69338): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015452.622:69339): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015454.575:69340): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015454.575:69341): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015454.632:69342): pid=288432 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015454.632:69343): pid=288432 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015454.633:69344): pid=288432 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015454.637:69345): pid=288432 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015454.640:69346): pid=288432 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015454.640:69347): pid=288432 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015454.644:69348): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015454.644:69349): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015454.665:69350): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015454.666:69351): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015454.717:69352): pid=288450 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015454.717:69353): pid=288450 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015454.718:69354): pid=288450 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015454.720:69355): pid=288450 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015454.723:69356): pid=288450 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015454.723:69357): pid=288450 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015454.728:69358): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015454.728:69359): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015454.739:69360): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015454.739:69361): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015454.800:69362): pid=288468 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015454.801:69363): pid=288468 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015454.801:69364): pid=288468 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015454.804:69365): pid=288468 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015456.372:69366): pid=288468 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015456.372:69367): pid=288468 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015456.377:69368): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015456.377:69369): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015459.446:69370): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015459.446:69371): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015459.481:69372): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015459.486:69373): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765015459.508:69374): pid=288678 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015459.509:69375): pid=288678 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015459.509:69376): pid=288678 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015459.514:69377): pid=288678 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015459.516:69378): pid=288678 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015459.517:69379): pid=288678 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015459.521:69380): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015459.521:69381): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015459.524:69382): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015459.524:69383): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015459.592:69384): pid=288717 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015459.593:69385): pid=288717 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015459.593:69386): pid=288717 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015459.596:69387): pid=288717 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_STOP msg=audit(1765015459.616:69388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015459.721:69389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015460.207:69390): pid=288717 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015460.207:69391): pid=288717 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015460.270:69392): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015460.270:69393): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015460.401:69394): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015460.401:69395): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015460.470:69396): pid=288788 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015460.471:69397): pid=288788 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015460.471:69398): pid=288788 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015460.475:69399): pid=288788 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015460.478:69400): pid=288788 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015460.478:69401): pid=288788 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015460.484:69402): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015460.484:69403): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015460.490:69404): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015460.490:69405): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015460.552:69406): pid=288806 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015460.552:69407): pid=288806 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015460.553:69408): pid=288806 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015460.555:69409): pid=288806 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015460.558:69410): pid=288806 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015460.558:69411): pid=288806 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015460.563:69412): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015460.563:69413): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015460.566:69414): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015460.566:69415): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015460.632:69416): pid=288824 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015460.632:69417): pid=288824 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015460.632:69418): pid=288824 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015460.636:69419): pid=288824 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015460.639:69420): pid=288824 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015460.639:69421): pid=288824 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015460.644:69422): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015460.644:69423): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015460.646:69424): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015460.646:69425): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015460.648:69426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765015460.748:69427): pid=288843 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015460.748:69428): pid=288843 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015460.751:69429): pid=288843 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015460.755:69430): pid=288843 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015460.759:69431): pid=288843 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015460.759:69432): pid=288843 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015460.763:69433): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015460.763:69434): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015460.767:69435): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015460.767:69436): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_STOP msg=audit(1765015460.785:69437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765015460.834:69438): pid=288878 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015460.834:69439): pid=288878 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015460.835:69440): pid=288878 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015460.839:69441): pid=288878 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015460.842:69442): pid=288878 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015460.843:69443): pid=288878 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015460.847:69444): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015460.847:69445): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015460.850:69446): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015460.850:69447): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765015460.901:69448): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015460.901:69449): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015460.903:69450): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015460.903:69451): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015460.964:69452): pid=288915 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015460.964:69453): pid=288915 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015460.965:69454): pid=288915 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015460.967:69455): pid=288915 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015460.972:69456): pid=288915 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015460.972:69457): pid=288915 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015460.976:69458): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015460.976:69459): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015460.979:69460): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015460.979:69461): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015461.042:69462): pid=288933 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015461.042:69463): pid=288933 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015461.043:69464): pid=288933 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015461.045:69465): pid=288933 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015461.048:69466): pid=288933 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015461.049:69467): pid=288933 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015461.054:69468): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015461.054:69469): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015461.057:69470): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015461.057:69471): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015461.123:69472): pid=288951 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015461.123:69473): pid=288951 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577202F6574632F636570682F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015461.124:69474): pid=288951 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015461.127:69475): pid=288951 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015461.131:69476): pid=288951 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015461.131:69477): pid=288951 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015461.135:69478): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015461.136:69479): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015461.139:69480): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015461.139:69481): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015461.206:69482): pid=288969 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015461.207:69483): pid=288969 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015461.207:69484): pid=288969 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015461.210:69485): pid=288969 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015461.213:69486): pid=288969 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015461.213:69487): pid=288969 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015461.218:69488): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015461.219:69489): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015461.234:69490): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015461.234:69491): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015461.298:69492): pid=288987 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015461.299:69493): pid=288987 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015461.299:69494): pid=288987 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015461.302:69495): pid=288987 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015461.305:69496): pid=288987 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015461.306:69497): pid=288987 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015461.311:69498): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015461.311:69499): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015461.314:69500): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015461.314:69501): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015461.374:69502): pid=289005 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015461.374:69503): pid=289005 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015461.375:69504): pid=289005 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015461.379:69505): pid=289005 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015461.381:69506): pid=289005 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015461.382:69507): pid=289005 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015461.392:69508): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015461.392:69509): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015461.405:69510): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015461.405:69511): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015461.468:69512): pid=289023 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015461.469:69513): pid=289023 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015461.469:69514): pid=289023 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015461.472:69515): pid=289023 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015461.475:69516): pid=289023 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015461.476:69517): pid=289023 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015461.479:69518): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015461.479:69519): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015461.482:69520): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015461.482:69521): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015461.530:69522): pid=289041 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015461.530:69523): pid=289041 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015461.530:69524): pid=289041 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015461.533:69525): pid=289041 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015461.534:69526): pid=289041 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015461.534:69527): pid=289041 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015461.538:69528): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015461.538:69529): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015461.543:69530): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015461.543:69531): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765015461.591:69532): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015461.591:69533): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015461.593:69534): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015461.594:69535): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015461.656:69536): pid=289075 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015461.657:69537): pid=289075 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015461.657:69538): pid=289075 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015461.661:69539): pid=289075 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015461.666:69540): pid=289075 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015461.667:69541): pid=289075 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015461.672:69542): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015461.672:69543): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015461.678:69544): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015461.679:69545): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015461.743:69546): pid=289093 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015461.744:69547): pid=289093 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015461.744:69548): pid=289093 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015461.747:69549): pid=289093 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015461.750:69550): pid=289093 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015461.750:69551): pid=289093 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015461.756:69552): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015461.756:69553): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015461.760:69554): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015461.761:69555): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015461.826:69556): pid=289111 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015461.826:69557): pid=289111 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015461.827:69558): pid=289111 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015461.830:69559): pid=289111 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015461.833:69560): pid=289111 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015461.833:69561): pid=289111 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015461.839:69562): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015461.839:69563): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015462.296:69564): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015462.297:69565): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015462.358:69566): pid=289129 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015462.358:69567): pid=289129 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015462.359:69568): pid=289129 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015462.362:69569): pid=289129 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015462.365:69570): pid=289129 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015462.366:69571): pid=289129 uid=1002 auid=1002 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015462.370:69572): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015462.370:69573): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015465.471:69574): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015465.584:69575): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015467.473:69576): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015467.614:69577): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015468.388:69578): pid=26171 uid=0 auid=1002 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26174 suid=1002 rport=35978 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015468.389:69579): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26193 suid=1002 rport=35990 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015468.389:69580): pid=26097 uid=0 auid=1002 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26100 suid=1002 rport=35938 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015468.389:69581): pid=26154 uid=0 auid=1002 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26157 suid=1002 rport=35966 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015468.389:69582): pid=26116 uid=0 auid=1002 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26119 suid=1002 rport=35940 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015468.389:69583): pid=26078 uid=0 auid=1002 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26081 suid=1002 rport=35932 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015468.389:69584): pid=26135 uid=0 auid=1002 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26138 suid=1002 rport=35950 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015468.389:69585): pid=25999 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26005 suid=1002 rport=35902 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015468.391:69586): pid=26059 uid=0 auid=1002 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26062 suid=1002 rport=35924 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015468.391:69587): pid=25982 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26003 suid=1002 rport=35892 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015468.392:69588): pid=26021 uid=0 auid=1002 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26024 suid=1002 rport=35908 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015468.392:69589): pid=26040 uid=0 auid=1002 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26043 suid=1002 rport=35912 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015468.399:69590): pid=26171 uid=0 auid=1002 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_END msg=audit(1765015468.399:69591): pid=26116 uid=0 auid=1002 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_END msg=audit(1765015468.399:69592): pid=25982 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_END msg=audit(1765015468.399:69593): pid=26078 uid=0 auid=1002 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_END msg=audit(1765015468.399:69594): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015468.399:69595): pid=26171 uid=0 auid=1002 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015468.399:69596): pid=26116 uid=0 auid=1002 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015468.399:69597): pid=25982 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015468.399:69598): pid=26078 uid=0 auid=1002 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015468.400:69599): pid=26190 uid=0 auid=1002 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_END msg=audit(1765015468.403:69600): pid=26059 uid=0 auid=1002 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015468.403:69601): pid=26059 uid=0 auid=1002 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_END msg=audit(1765015468.415:69602): pid=25999 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_END msg=audit(1765015468.415:69603): pid=26097 uid=0 auid=1002 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_END msg=audit(1765015468.415:69604): pid=26154 uid=0 auid=1002 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015468.415:69605): pid=26097 uid=0 auid=1002 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015468.415:69606): pid=25999 uid=0 auid=1002 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015468.415:69607): pid=26154 uid=0 auid=1002 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_END msg=audit(1765015468.416:69608): pid=26021 uid=0 auid=1002 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015468.417:69609): pid=26021 uid=0 auid=1002 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_END msg=audit(1765015468.419:69610): pid=26135 uid=0 auid=1002 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015468.419:69611): pid=26135 uid=0 auid=1002 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_END msg=audit(1765015468.428:69612): pid=26040 uid=0 auid=1002 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015468.429:69613): pid=26040 uid=0 auid=1002 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015468.771:69614): pid=289234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=289234 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765015468.773:69615): pid=289233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=289234 suid=74 rport=41756 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765015468.773:69616): pid=289233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=289234 suid=74 rport=41756 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765015468.829:69617): pid=289233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="ceph-admin" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015468.829:69618): pid=289233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:1d:06:01:4f:c9:f7:1d:b9:e2:70:3b:4f:f6:d7:a1:77:7f:a0:25:73:05:b6:4c:3e:7d:33:25:99:1d:b0:0a:c1 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765015468.845:69619): pid=289233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.106 addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015468.846:69620): pid=289233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=289234 suid=74 rport=41756 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765015468.848:69621): pid=289233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.106 addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765015468.848:69622): pid=289233 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1002 tty=(none) old-ses=4294967295 ses=64 res=1UID="root" OLD-AUID="unset" AUID="ceph-admin"
type=SYSCALL msg=audit(1765015468.848:69622): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc19698780 a2=4 a3=3ea items=0 ppid=182854 pid=289233 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=64 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015468.848:69622): proctitle=737368643A20636570682D61646D696E205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765015468.850:69623): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.106 addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_START msg=audit(1765015468.885:69624): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.106 addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015468.887:69625): pid=289236 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=289236 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="root"
type=CRED_ACQ msg=audit(1765015468.889:69626): pid=289236 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.106 addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_LOGIN msg=audit(1765015468.934:69627): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015468.934:69628): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015468.936:69629): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=289237 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015468.993:69630): pid=289237 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015468.993:69631): pid=289237 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015468.994:69632): pid=289237 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015468.998:69633): pid=289237 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015469.000:69634): pid=289237 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015469.000:69635): pid=289237 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015469.008:69636): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015469.008:69637): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015469.024:69638): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015469.024:69639): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015469.025:69640): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=289255 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015469.068:69641): pid=289255 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015469.068:69642): pid=289255 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015469.069:69643): pid=289255 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015469.071:69644): pid=289255 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015470.512:69645): pid=289255 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015470.513:69646): pid=289255 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015470.517:69647): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015470.518:69648): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015471.137:69649): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015471.137:69650): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015471.138:69651): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=289468 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015471.187:69652): pid=289468 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015471.187:69653): pid=289468 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015471.188:69654): pid=289468 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015471.192:69655): pid=289468 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015471.193:69656): pid=289468 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015471.194:69657): pid=289468 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015471.198:69658): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015471.198:69659): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015471.203:69660): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015471.203:69661): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015471.204:69662): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=289486 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015471.250:69663): pid=289486 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015471.250:69664): pid=289486 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015471.252:69665): pid=289486 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015471.255:69666): pid=289486 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765015471.475:69667): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015471.666:69668): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015471.969:69669): pid=289486 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015471.970:69670): pid=289486 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015472.071:69671): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015472.071:69672): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015472.233:69673): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015472.233:69674): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015472.234:69675): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=289559 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015472.289:69676): pid=289559 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015472.290:69677): pid=289559 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015472.291:69678): pid=289559 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015472.294:69679): pid=289559 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015472.297:69680): pid=289559 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015472.297:69681): pid=289559 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015472.302:69682): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015472.302:69683): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015472.308:69684): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015472.308:69685): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015472.309:69686): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=289577 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015472.356:69687): pid=289577 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015472.357:69688): pid=289577 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C6973742D6E6574776F726B73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015472.357:69689): pid=289577 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015472.360:69690): pid=289577 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015472.697:69691): pid=289577 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015472.698:69692): pid=289577 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015472.703:69693): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015472.703:69694): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015472.990:69695): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015472.990:69696): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015472.991:69697): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=289614 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015473.039:69698): pid=289614 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015473.039:69699): pid=289614 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015473.039:69700): pid=289614 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015473.041:69701): pid=289614 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.043:69702): pid=289614 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015473.043:69703): pid=289614 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.046:69704): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015473.046:69705): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015473.050:69706): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015473.050:69707): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015473.051:69708): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=289632 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015473.103:69709): pid=289632 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015473.103:69710): pid=289632 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015473.104:69711): pid=289632 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015473.106:69712): pid=289632 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.108:69713): pid=289632 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015473.109:69714): pid=289632 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.112:69715): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015473.113:69716): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015473.118:69717): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015473.119:69718): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015473.120:69719): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=289650 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015473.160:69720): pid=289650 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015473.160:69721): pid=289650 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015473.160:69722): pid=289650 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015473.163:69723): pid=289650 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.164:69724): pid=289650 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015473.164:69725): pid=289650 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.168:69726): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015473.168:69727): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015473.170:69728): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015473.170:69729): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015473.171:69730): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=289668 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015473.216:69731): pid=289668 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015473.216:69732): pid=289668 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015473.217:69733): pid=289668 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015473.221:69734): pid=289668 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.224:69735): pid=289668 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015473.225:69736): pid=289668 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.228:69737): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015473.228:69738): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015473.229:69739): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015473.229:69740): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015473.230:69741): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=289686 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015473.284:69742): pid=289686 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015473.284:69743): pid=289686 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015473.284:69744): pid=289686 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015473.287:69745): pid=289686 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.289:69746): pid=289686 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015473.289:69747): pid=289686 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.294:69748): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015473.294:69749): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015473.301:69750): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015473.301:69751): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015473.302:69752): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=289704 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015473.367:69753): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015473.367:69754): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015473.375:69755): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015473.375:69756): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015473.376:69757): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=289720 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015473.428:69758): pid=289720 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015473.429:69759): pid=289720 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015473.429:69760): pid=289720 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015473.431:69761): pid=289720 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.435:69762): pid=289720 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015473.436:69763): pid=289720 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.439:69764): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015473.439:69765): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015473.443:69766): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015473.443:69767): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015473.444:69768): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=289738 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015473.503:69769): pid=289738 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015473.503:69770): pid=289738 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015473.503:69771): pid=289738 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015473.506:69772): pid=289738 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.509:69773): pid=289738 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015473.509:69774): pid=289738 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.513:69775): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015473.513:69776): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015473.524:69777): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015473.524:69778): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015473.526:69779): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=289756 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015473.578:69780): pid=289756 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015473.578:69781): pid=289756 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577202F6574632F636570682F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015473.579:69782): pid=289756 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015473.581:69783): pid=289756 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.585:69784): pid=289756 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015473.585:69785): pid=289756 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.589:69786): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015473.589:69787): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015473.592:69788): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015473.592:69789): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015473.593:69790): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=289774 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015473.645:69791): pid=289774 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015473.645:69792): pid=289774 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015473.646:69793): pid=289774 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015473.649:69794): pid=289774 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.652:69795): pid=289774 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015473.652:69796): pid=289774 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.655:69797): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015473.655:69798): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015473.657:69799): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015473.657:69800): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015473.659:69801): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=289792 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015473.709:69802): pid=289792 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015473.710:69803): pid=289792 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015473.710:69804): pid=289792 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015473.713:69805): pid=289792 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.716:69806): pid=289792 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015473.716:69807): pid=289792 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.720:69808): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015473.721:69809): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015473.723:69810): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015473.723:69811): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015473.725:69812): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=289810 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015473.784:69813): pid=289810 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015473.785:69814): pid=289810 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015473.786:69815): pid=289810 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015473.789:69816): pid=289810 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.792:69817): pid=289810 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015473.792:69818): pid=289810 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.796:69819): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015473.796:69820): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015473.800:69821): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015473.800:69822): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015473.802:69823): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=289828 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015473.861:69824): pid=289828 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015473.862:69825): pid=289828 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015473.862:69826): pid=289828 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015473.865:69827): pid=289828 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.869:69828): pid=289828 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015473.869:69829): pid=289828 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.877:69830): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015473.877:69831): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015473.884:69832): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015473.884:69833): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015473.886:69834): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=289846 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015473.948:69835): pid=289846 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015473.949:69836): pid=289846 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015473.949:69837): pid=289846 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015473.952:69838): pid=289846 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.955:69839): pid=289846 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015473.955:69840): pid=289846 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015473.959:69841): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015473.959:69842): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015473.961:69843): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015473.961:69844): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015473.962:69845): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=289864 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015474.011:69846): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015474.011:69847): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015474.013:69848): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015474.013:69849): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015474.015:69850): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=289880 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015474.084:69851): pid=289880 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015474.084:69852): pid=289880 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015474.085:69853): pid=289880 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015474.088:69854): pid=289880 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.093:69855): pid=289880 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015474.094:69856): pid=289880 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.098:69857): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015474.098:69858): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015474.101:69859): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015474.101:69860): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015474.103:69861): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=289898 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015474.160:69862): pid=289898 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015474.160:69863): pid=289898 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015474.161:69864): pid=289898 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015474.163:69865): pid=289898 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.166:69866): pid=289898 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015474.166:69867): pid=289898 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.173:69868): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015474.173:69869): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015474.186:69870): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015474.186:69871): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015474.188:69872): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=289916 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015474.247:69873): pid=289916 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015474.248:69874): pid=289916 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015474.248:69875): pid=289916 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015474.251:69876): pid=289916 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.254:69877): pid=289916 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015474.254:69878): pid=289916 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.259:69879): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015474.259:69880): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015474.263:69881): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015474.263:69882): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015474.264:69883): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=289934 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015474.323:69884): pid=289934 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015474.323:69885): pid=289934 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015474.324:69886): pid=289934 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015474.326:69887): pid=289934 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.329:69888): pid=289934 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015474.329:69889): pid=289934 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.335:69890): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015474.336:69891): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015474.340:69892): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015474.340:69893): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015474.341:69894): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=289952 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015474.383:69895): pid=289952 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015474.383:69896): pid=289952 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015474.385:69897): pid=289952 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015474.387:69898): pid=289952 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.390:69899): pid=289952 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015474.390:69900): pid=289952 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.402:69901): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015474.402:69902): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015474.419:69903): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015474.419:69904): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015474.421:69905): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=289970 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015474.488:69906): pid=289970 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015474.488:69907): pid=289970 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015474.488:69908): pid=289970 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015474.491:69909): pid=289970 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.494:69910): pid=289970 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015474.495:69911): pid=289970 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.502:69912): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015474.502:69913): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015474.511:69914): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015474.511:69915): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015474.513:69916): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=289988 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015474.578:69917): pid=289988 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015474.578:69918): pid=289988 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015474.579:69919): pid=289988 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015474.581:69920): pid=289988 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.585:69921): pid=289988 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015474.585:69922): pid=289988 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.591:69923): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015474.591:69924): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015474.597:69925): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015474.597:69926): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015474.598:69927): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=290006 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015474.657:69928): pid=290006 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015474.657:69929): pid=290006 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015474.658:69930): pid=290006 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015474.660:69931): pid=290006 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.663:69932): pid=290006 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015474.663:69933): pid=290006 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.666:69934): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015474.666:69935): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015474.669:69936): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015474.669:69937): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015474.670:69938): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=290024 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015474.715:69939): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015474.715:69940): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015474.722:69941): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015474.722:69942): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015474.723:69943): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=290040 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015474.759:69944): pid=290040 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015474.759:69945): pid=290040 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015474.760:69946): pid=290040 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015474.761:69947): pid=290040 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.764:69948): pid=290040 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015474.765:69949): pid=290040 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.768:69950): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015474.768:69951): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015474.771:69952): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015474.771:69953): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015474.772:69954): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=290058 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015474.807:69955): pid=290058 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015474.808:69956): pid=290058 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363030202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015474.808:69957): pid=290058 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015474.810:69958): pid=290058 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.812:69959): pid=290058 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015474.812:69960): pid=290058 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.815:69961): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015474.815:69962): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015474.817:69963): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015474.817:69964): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015474.818:69965): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=290076 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015474.858:69966): pid=290076 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015474.859:69967): pid=290076 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577202F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E67 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015474.859:69968): pid=290076 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015474.861:69969): pid=290076 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.864:69970): pid=290076 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015474.864:69971): pid=290076 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.868:69972): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015474.868:69973): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015474.879:69974): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015474.879:69975): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015474.880:69976): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=290094 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015474.923:69977): pid=290094 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015474.923:69978): pid=290094 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015474.925:69979): pid=290094 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015474.928:69980): pid=290094 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.930:69981): pid=290094 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015474.931:69982): pid=290094 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.935:69983): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015474.935:69984): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015474.940:69985): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015474.940:69986): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015474.941:69987): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=290112 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015474.981:69988): pid=290112 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015474.981:69989): pid=290112 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015474.981:69990): pid=290112 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015474.984:69991): pid=290112 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.986:69992): pid=290112 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015474.986:69993): pid=290112 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015474.991:69994): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015474.991:69995): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015474.999:69996): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015474.999:69997): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015475.001:69998): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=290130 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015475.058:69999): pid=290130 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015475.058:70000): pid=290130 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015475.058:70001): pid=290130 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015475.060:70002): pid=290130 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015475.063:70003): pid=290130 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015475.063:70004): pid=290130 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015475.069:70005): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015475.069:70006): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015475.075:70007): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015475.075:70008): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015475.076:70009): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=290148 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015475.116:70010): pid=290148 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015475.117:70011): pid=290148 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015475.117:70012): pid=290148 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015475.119:70013): pid=290148 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015475.122:70014): pid=290148 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015475.123:70015): pid=290148 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015475.126:70016): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015475.126:70017): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015475.130:70018): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015475.130:70019): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015475.131:70020): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=290166 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015475.175:70021): pid=290166 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015475.175:70022): pid=290166 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015475.176:70023): pid=290166 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015475.179:70024): pid=290166 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015475.182:70025): pid=290166 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015475.182:70026): pid=290166 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015475.187:70027): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015475.187:70028): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015475.194:70029): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015475.194:70030): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015475.195:70031): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=290184 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015475.244:70032): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015475.244:70033): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015475.247:70034): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015475.247:70035): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015475.249:70036): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=290200 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015475.300:70037): pid=290200 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015475.300:70038): pid=290200 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015475.301:70039): pid=290200 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015475.304:70040): pid=290200 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015475.311:70041): pid=290200 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015475.311:70042): pid=290200 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015475.316:70043): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015475.316:70044): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015475.325:70045): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015475.325:70046): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015475.327:70047): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=290218 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015475.388:70048): pid=290218 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015475.388:70049): pid=290218 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363030202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015475.389:70050): pid=290218 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015475.393:70051): pid=290218 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015475.395:70052): pid=290218 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015475.396:70053): pid=290218 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015475.400:70054): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015475.400:70055): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015475.403:70056): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015475.403:70057): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015475.405:70058): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=290236 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015475.464:70059): pid=290236 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015475.465:70060): pid=290236 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E67 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015475.465:70061): pid=290236 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015475.468:70062): pid=290236 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015475.472:70063): pid=290236 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015475.472:70064): pid=290236 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015475.477:70065): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015475.477:70066): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015476.335:70067): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015476.336:70068): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015476.337:70069): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=290255 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015476.398:70070): pid=290255 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015476.398:70071): pid=290255 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015476.398:70072): pid=290255 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015476.401:70073): pid=290255 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015476.404:70074): pid=290255 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015476.404:70075): pid=290255 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015476.408:70076): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015476.408:70077): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015483.479:70078): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015483.605:70079): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015490.475:70080): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015490.479:70081): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015490.624:70082): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015490.646:70083): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015491.469:70084): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015491.574:70085): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015496.128:70086): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015496.128:70087): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015496.129:70088): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=290352 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015496.190:70089): pid=290352 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015496.190:70090): pid=290352 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015496.191:70091): pid=290352 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015496.209:70092): pid=290352 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765015496.210:70093): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015496.211:70094): pid=290352 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015496.212:70095): pid=290352 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015496.215:70096): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015496.215:70097): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015496.217:70098): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015496.217:70099): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015496.219:70100): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=290371 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015496.279:70101): pid=290371 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015496.279:70102): pid=290371 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015496.280:70103): pid=290371 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015496.283:70104): pid=290371 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_STOP msg=audit(1765015496.329:70105): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015496.797:70106): prog-id=2156 op=LOAD
type=SYSCALL msg=audit(1765015496.797:70106): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff8d7d38b0 a2=90 a3=9500000000 items=0 ppid=290437 pid=290438 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=64 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015496.797:70106): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F646535356631303166363361336263333235383064376634336533343563
type=BPF msg=audit(1765015496.858:70107): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015497.010:70108): pid=290371 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015497.010:70109): pid=290371 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015497.018:70110): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015497.018:70111): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015497.086:70112): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015497.086:70113): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015497.088:70114): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=290458 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015497.135:70115): pid=290458 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015497.136:70116): pid=290458 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015497.136:70117): pid=290458 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015497.141:70118): pid=290458 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015497.143:70119): pid=290458 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015497.143:70120): pid=290458 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015497.146:70121): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015497.147:70122): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015497.149:70123): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015497.150:70124): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015497.151:70125): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=290476 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015497.207:70126): pid=290476 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015497.207:70127): pid=290476 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015497.207:70128): pid=290476 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015497.210:70129): pid=290476 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765015497.683:70130): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015497.731:70131): prog-id=2157 op=LOAD
type=SYSCALL msg=audit(1765015497.731:70131): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff48fa0d10 a2=90 a3=9500000000 items=0 ppid=290532 pid=290533 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=64 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015497.731:70131): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F373738323362613561353266303736333137626635353765363962313965
type=SERVICE_STOP msg=audit(1765015497.790:70132): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015497.836:70133): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015498.089:70134): pid=290476 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015498.089:70135): pid=290476 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015498.095:70136): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015498.095:70137): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015498.151:70138): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015498.151:70139): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015498.152:70140): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=290577 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015498.210:70141): pid=290577 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015498.210:70142): pid=290577 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015498.211:70143): pid=290577 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015498.215:70144): pid=290577 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015498.219:70145): pid=290577 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015498.219:70146): pid=290577 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015498.223:70147): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015498.223:70148): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015498.226:70149): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015498.227:70150): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015498.228:70151): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=290595 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015498.282:70152): pid=290595 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015498.282:70153): pid=290595 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015498.282:70154): pid=290595 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015498.284:70155): pid=290595 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015498.784:70156): prog-id=2158 op=LOAD
type=SYSCALL msg=audit(1765015498.784:70156): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe35db6b80 a2=90 a3=9500000000 items=0 ppid=290646 pid=290647 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=64 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015498.784:70156): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F356463623432393439396664623239623035396163636561373265356464
type=BPF msg=audit(1765015498.833:70157): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015499.087:70158): pid=290595 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015499.087:70159): pid=290595 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015499.093:70160): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015499.093:70161): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015499.156:70162): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015499.156:70163): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015499.157:70164): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=290674 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015499.219:70165): pid=290674 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015499.219:70166): pid=290674 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015499.220:70167): pid=290674 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015499.224:70168): pid=290674 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015499.226:70169): pid=290674 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015499.227:70170): pid=290674 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015499.231:70171): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015499.231:70172): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015499.234:70173): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015499.234:70174): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015499.235:70175): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=290692 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015499.295:70176): pid=290692 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015499.295:70177): pid=290692 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015499.296:70178): pid=290692 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015499.298:70179): pid=290692 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015499.781:70180): prog-id=2159 op=LOAD
type=SYSCALL msg=audit(1765015499.781:70180): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffeadf03fa0 a2=90 a3=9500000000 items=0 ppid=290741 pid=290742 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=64 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015499.781:70180): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F656637323433393066643632366432353734633032626565646666343562
type=BPF msg=audit(1765015499.835:70181): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015499.947:70182): pid=290692 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015499.947:70183): pid=290692 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015499.952:70184): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015499.952:70185): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015500.013:70186): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015500.013:70187): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015500.014:70188): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=290763 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015500.067:70189): pid=290763 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015500.068:70190): pid=290763 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015500.068:70191): pid=290763 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015500.071:70192): pid=290763 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015500.075:70193): pid=290763 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015500.075:70194): pid=290763 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015500.079:70195): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015500.080:70196): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015500.083:70197): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015500.083:70198): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015500.084:70199): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=290781 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015500.149:70200): pid=290781 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015500.149:70201): pid=290781 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015500.150:70202): pid=290781 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015500.153:70203): pid=290781 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015500.659:70204): prog-id=2160 op=LOAD
type=SYSCALL msg=audit(1765015500.659:70204): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff02b90940 a2=90 a3=9500000000 items=0 ppid=290830 pid=290831 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=64 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015500.659:70204): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F383464613662363765653365656532653663613664373632663535376665
type=BPF msg=audit(1765015500.702:70205): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015500.821:70206): pid=290781 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015500.821:70207): pid=290781 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015500.826:70208): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015500.826:70209): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015500.879:70210): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015500.879:70211): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015500.880:70212): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=290851 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015500.940:70213): pid=290851 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015500.941:70214): pid=290851 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015500.942:70215): pid=290851 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015500.945:70216): pid=290851 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015500.948:70217): pid=290851 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015500.948:70218): pid=290851 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015500.954:70219): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015500.954:70220): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015500.958:70221): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015500.958:70222): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015500.960:70223): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=290869 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015501.016:70224): pid=290869 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015501.017:70225): pid=290869 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935205F6F726368206465706C6F79202D2D667369642031393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015501.017:70226): pid=290869 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015501.020:70227): pid=290869 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015501.535:70228): prog-id=2161 op=LOAD
type=SYSCALL msg=audit(1765015501.535:70228): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd90fd2f50 a2=90 a3=9500000000 items=0 ppid=290917 pid=290918 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=64 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015501.535:70228): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F616633613134393338623035313266623636663032303836313939653765
type=BPF msg=audit(1765015501.591:70229): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015501.710:70230): pid=290869 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015501.710:70231): pid=290869 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015501.716:70232): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015501.716:70233): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015502.219:70234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015502.402:70235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015503.302:70236): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015503.302:70237): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015503.304:70238): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=290964 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015503.376:70239): pid=290964 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015503.376:70240): pid=290964 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015503.377:70241): pid=290964 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015503.382:70242): pid=290964 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015503.385:70243): pid=290964 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015503.386:70244): pid=290964 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015503.396:70245): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015503.396:70246): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015503.408:70247): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015503.408:70248): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015503.410:70249): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=290982 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015503.474:70250): pid=290982 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015503.474:70251): pid=290982 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015503.475:70252): pid=290982 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015503.478:70253): pid=290982 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015503.482:70254): pid=290982 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015503.482:70255): pid=290982 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015503.487:70256): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015503.487:70257): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015503.494:70258): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015503.494:70259): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015503.495:70260): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=291000 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015503.555:70261): pid=291000 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015503.556:70262): pid=291000 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015503.556:70263): pid=291000 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015503.558:70264): pid=291000 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015503.561:70265): pid=291000 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015503.561:70266): pid=291000 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015503.566:70267): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015503.566:70268): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015503.569:70269): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015503.569:70270): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015503.571:70271): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=291018 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015503.634:70272): pid=291018 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015503.634:70273): pid=291018 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015503.635:70274): pid=291018 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015503.638:70275): pid=291018 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015503.642:70276): pid=291018 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015503.643:70277): pid=291018 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015503.648:70278): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015503.648:70279): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015503.651:70280): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015503.651:70281): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015503.652:70282): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=291036 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015503.716:70283): pid=291036 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015503.716:70284): pid=291036 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015503.717:70285): pid=291036 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015503.719:70286): pid=291036 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015503.722:70287): pid=291036 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015503.723:70288): pid=291036 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015503.729:70289): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015503.729:70290): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015503.739:70291): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015503.739:70292): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015503.741:70293): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=291054 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015503.798:70294): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015503.798:70295): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015503.801:70296): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015503.802:70297): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015503.803:70298): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=291070 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015503.864:70299): pid=291070 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015503.865:70300): pid=291070 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015503.865:70301): pid=291070 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015503.868:70302): pid=291070 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015503.874:70303): pid=291070 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015503.874:70304): pid=291070 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015503.879:70305): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015503.879:70306): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015503.881:70307): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015503.882:70308): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015503.883:70309): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=291088 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015503.948:70310): pid=291088 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015503.948:70311): pid=291088 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015503.949:70312): pid=291088 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015503.951:70313): pid=291088 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015503.955:70314): pid=291088 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015503.955:70315): pid=291088 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015503.959:70316): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015503.959:70317): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015503.962:70318): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015503.962:70319): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015503.964:70320): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=291106 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015504.027:70321): pid=291106 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015504.028:70322): pid=291106 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577202F6574632F636570682F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015504.028:70323): pid=291106 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015504.031:70324): pid=291106 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015504.034:70325): pid=291106 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015504.035:70326): pid=291106 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015504.039:70327): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015504.039:70328): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015504.042:70329): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015504.042:70330): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015504.044:70331): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=291124 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015504.109:70332): pid=291124 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015504.109:70333): pid=291124 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015504.110:70334): pid=291124 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015504.112:70335): pid=291124 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015504.116:70336): pid=291124 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015504.117:70337): pid=291124 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015504.121:70338): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015504.121:70339): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015504.124:70340): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015504.124:70341): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015504.125:70342): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=291142 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015504.189:70343): pid=291142 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015504.190:70344): pid=291142 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015504.190:70345): pid=291142 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015504.193:70346): pid=291142 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015504.197:70347): pid=291142 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015504.197:70348): pid=291142 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015504.202:70349): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015504.202:70350): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015504.207:70351): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015504.207:70352): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015504.209:70353): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=291160 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015504.272:70354): pid=291160 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015504.273:70355): pid=291160 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015504.274:70356): pid=291160 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015504.277:70357): pid=291160 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015504.280:70358): pid=291160 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015504.280:70359): pid=291160 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015504.286:70360): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015504.286:70361): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015504.294:70362): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015504.294:70363): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015504.295:70364): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=291178 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015504.361:70365): pid=291178 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015504.361:70366): pid=291178 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015504.362:70367): pid=291178 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015504.364:70368): pid=291178 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015504.368:70369): pid=291178 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015504.368:70370): pid=291178 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015504.374:70371): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015504.375:70372): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015504.380:70373): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015504.380:70374): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015504.381:70375): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=291196 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015504.446:70376): pid=291196 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015504.446:70377): pid=291196 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015504.447:70378): pid=291196 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015504.449:70379): pid=291196 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015504.452:70380): pid=291196 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015504.452:70381): pid=291196 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015504.459:70382): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015504.459:70383): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015504.465:70384): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015504.465:70385): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015504.466:70386): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=291214 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015504.522:70387): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015504.522:70388): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015504.525:70389): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015504.525:70390): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015504.526:70391): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=291230 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015504.590:70392): pid=291230 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015504.590:70393): pid=291230 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015504.591:70394): pid=291230 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015504.593:70395): pid=291230 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015504.598:70396): pid=291230 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015504.598:70397): pid=291230 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015504.603:70398): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015504.603:70399): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015504.608:70400): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015504.608:70401): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015504.610:70402): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=291248 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015504.663:70403): pid=291248 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015504.663:70404): pid=291248 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015504.664:70405): pid=291248 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015504.666:70406): pid=291248 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015504.669:70407): pid=291248 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015504.670:70408): pid=291248 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015504.675:70409): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015504.675:70410): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015504.682:70411): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015504.682:70412): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015504.683:70413): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=291266 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015504.749:70414): pid=291266 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015504.749:70415): pid=291266 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015504.750:70416): pid=291266 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015504.753:70417): pid=291266 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015504.757:70418): pid=291266 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015504.757:70419): pid=291266 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015504.763:70420): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015504.763:70421): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015506.772:70422): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015506.772:70423): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015506.774:70424): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=291284 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015506.836:70425): pid=291284 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015506.836:70426): pid=291284 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015506.837:70427): pid=291284 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015506.840:70428): pid=291284 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015506.843:70429): pid=291284 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015506.844:70430): pid=291284 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015506.848:70431): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015506.848:70432): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015507.234:70433): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015507.234:70434): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015507.236:70435): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=291302 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015507.296:70436): pid=291302 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015507.297:70437): pid=291302 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015507.297:70438): pid=291302 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015507.300:70439): pid=291302 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015507.303:70440): pid=291302 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015507.304:70441): pid=291302 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015507.308:70442): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015507.308:70443): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015514.474:70444): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015514.625:70445): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015517.832:70446): pid=291339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=291339 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765015518.047:70447): pid=291338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=291339 suid=74 rport=44816 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.10.175.77 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765015518.047:70448): pid=291338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=291339 suid=74 rport=44816 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.10.175.77 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765015519.023:70449): pid=291338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=291339 suid=74 rport=44816 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.10.175.77 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765015519.024:70450): pid=291338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=291339 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765015519.024:70451): pid=291338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.10.175.77 addr=45.10.175.77 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015519.025:70452): pid=291338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=291338 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765015519.025:70453): pid=291338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.10.175.77 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015521.470:70454): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015521.473:70455): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015521.600:70456): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015521.637:70457): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015521.733:70458): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015521.819:70459): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015526.475:70460): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015526.604:70461): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015527.624:70462): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015527.624:70463): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015527.626:70464): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=291439 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015527.674:70465): pid=291439 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015527.674:70466): pid=291439 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015527.675:70467): pid=291439 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015527.679:70468): pid=291439 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015527.682:70469): pid=291439 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015527.682:70470): pid=291439 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015527.686:70471): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015527.686:70472): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015527.689:70473): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015527.689:70474): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015527.690:70475): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=291457 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015527.736:70476): pid=291457 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015527.736:70477): pid=291457 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015527.737:70478): pid=291457 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015527.740:70479): pid=291457 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765015528.125:70480): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015528.301:70481): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015528.368:70482): prog-id=2162 op=LOAD
type=SYSCALL msg=audit(1765015528.368:70482): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdafa636a0 a2=90 a3=9500000000 items=0 ppid=291553 pid=291554 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=64 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015528.368:70482): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F613838643731643334646564393764653462333830396333393431366430
type=BPF msg=audit(1765015528.418:70483): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015528.587:70484): pid=291457 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015528.587:70485): pid=291457 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015528.592:70486): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015528.592:70487): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015528.651:70488): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015528.651:70489): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015528.652:70490): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=291577 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015528.706:70491): pid=291577 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015528.706:70492): pid=291577 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015528.707:70493): pid=291577 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015528.712:70494): pid=291577 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015528.714:70495): pid=291577 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015528.715:70496): pid=291577 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015528.719:70497): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015528.719:70498): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015528.722:70499): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015528.722:70500): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015528.723:70501): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=291595 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015528.782:70502): pid=291595 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015528.783:70503): pid=291595 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935205F6F726368206465706C6F79202D2D667369642031393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015528.783:70504): pid=291595 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015528.786:70505): pid=291595 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015529.290:70506): prog-id=2163 op=LOAD
type=SYSCALL msg=audit(1765015529.290:70506): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe0ac904b0 a2=90 a3=9500000000 items=0 ppid=291644 pid=291645 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=64 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015529.290:70506): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F376231333061363065653039643130663230376666343432663735653136
type=BPF msg=audit(1765015529.349:70507): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015529.596:70508): pid=291595 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015529.597:70509): pid=291595 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015529.601:70510): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015529.601:70511): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015529.659:70512): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015529.660:70513): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015529.661:70514): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=291674 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015529.717:70515): pid=291674 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015529.717:70516): pid=291674 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015529.717:70517): pid=291674 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015529.721:70518): pid=291674 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015529.724:70519): pid=291674 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015529.724:70520): pid=291674 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015529.728:70521): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015529.728:70522): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015529.731:70523): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015529.731:70524): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015529.732:70525): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=291692 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015529.786:70526): pid=291692 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015529.786:70527): pid=291692 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015529.787:70528): pid=291692 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015529.790:70529): pid=291692 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015530.267:70530): prog-id=2164 op=LOAD
type=SYSCALL msg=audit(1765015530.267:70530): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd85e26910 a2=90 a3=9500000000 items=0 ppid=291743 pid=291744 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=64 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015530.267:70530): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F613362653732633837666536643033383931326231613761633538626661
type=BPF msg=audit(1765015530.309:70531): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015530.559:70532): pid=291692 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015530.559:70533): pid=291692 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015530.565:70534): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015530.565:70535): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015530.622:70536): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015530.622:70537): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015530.623:70538): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=291769 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015530.691:70539): pid=291769 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015530.691:70540): pid=291769 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015530.692:70541): pid=291769 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015530.696:70542): pid=291769 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015530.699:70543): pid=291769 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015530.699:70544): pid=291769 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015530.704:70545): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015530.704:70546): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015530.707:70547): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015530.707:70548): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015530.708:70549): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=291787 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015530.766:70550): pid=291787 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015530.766:70551): pid=291787 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015530.767:70552): pid=291787 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015530.770:70553): pid=291787 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015531.271:70554): prog-id=2165 op=LOAD
type=SYSCALL msg=audit(1765015531.271:70554): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff0d072610 a2=90 a3=9500000000 items=0 ppid=291838 pid=291839 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=64 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015531.271:70554): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393632396562313134373232303262376465303538663436363337346332
type=BPF msg=audit(1765015531.323:70555): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015531.485:70556): pid=291787 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015531.486:70557): pid=291787 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015531.491:70558): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015531.492:70559): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015531.559:70560): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015531.559:70561): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015531.560:70562): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=291860 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015531.628:70563): pid=291860 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015531.628:70564): pid=291860 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015531.631:70565): pid=291860 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015531.635:70566): pid=291860 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015531.638:70567): pid=291860 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015531.638:70568): pid=291860 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015531.644:70569): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015531.644:70570): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015531.651:70571): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015531.651:70572): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015531.652:70573): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=291878 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015531.703:70574): pid=291878 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015531.704:70575): pid=291878 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015531.704:70576): pid=291878 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015531.707:70577): pid=291878 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015532.272:70578): prog-id=2166 op=LOAD
type=SYSCALL msg=audit(1765015532.272:70578): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcff9b65e0 a2=90 a3=9500000000 items=0 ppid=291930 pid=291931 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=64 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015532.272:70578): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F623935313236333738343438656138653433353937623435363562346230
type=BPF msg=audit(1765015532.333:70579): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765015532.419:70580): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015532.460:70581): pid=291878 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015532.460:70582): pid=291878 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015532.467:70583): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015532.467:70584): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015532.543:70585): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015532.543:70586): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015532.544:70587): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=291973 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=SERVICE_STOP msg=audit(1765015532.606:70588): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765015532.613:70589): pid=291973 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015532.613:70590): pid=291973 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015532.614:70591): pid=291973 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015532.618:70592): pid=291973 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015532.620:70593): pid=291973 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015532.621:70594): pid=291973 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015532.624:70595): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015532.624:70596): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015532.641:70597): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015532.641:70598): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015532.642:70599): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=291995 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015532.701:70600): pid=291995 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015532.701:70601): pid=291995 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015532.701:70602): pid=291995 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015532.704:70603): pid=291995 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015533.321:70604): pid=291995 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015533.321:70605): pid=291995 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015533.474:70606): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015533.474:70607): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015535.155:70608): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015535.155:70609): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015535.157:70610): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=292044 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015535.215:70611): pid=292044 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015535.216:70612): pid=292044 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015535.216:70613): pid=292044 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015535.220:70614): pid=292044 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015535.223:70615): pid=292044 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015535.223:70616): pid=292044 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015535.232:70617): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015535.233:70618): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015535.240:70619): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015535.240:70620): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015535.241:70621): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=292062 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015535.297:70622): pid=292062 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015535.297:70623): pid=292062 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015535.298:70624): pid=292062 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015535.300:70625): pid=292062 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015535.304:70626): pid=292062 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015535.305:70627): pid=292062 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015535.308:70628): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015535.308:70629): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015535.314:70630): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015535.314:70631): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015535.315:70632): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=292080 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015535.374:70633): pid=292080 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015535.374:70634): pid=292080 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015535.375:70635): pid=292080 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015535.378:70636): pid=292080 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015535.381:70637): pid=292080 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015535.381:70638): pid=292080 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015535.386:70639): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015535.386:70640): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015535.388:70641): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015535.388:70642): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015535.390:70643): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=292098 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015535.456:70644): pid=292098 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015535.456:70645): pid=292098 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015535.457:70646): pid=292098 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015535.459:70647): pid=292098 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015535.462:70648): pid=292098 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015535.462:70649): pid=292098 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015535.466:70650): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015535.466:70651): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015535.468:70652): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015535.468:70653): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015535.469:70654): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=292116 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015535.530:70655): pid=292116 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015535.530:70656): pid=292116 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015535.531:70657): pid=292116 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015535.534:70658): pid=292116 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015535.537:70659): pid=292116 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015535.537:70660): pid=292116 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015535.541:70661): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015535.541:70662): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015535.543:70663): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015535.543:70664): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015535.545:70665): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=292134 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015535.594:70666): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015535.594:70667): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015535.597:70668): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015535.597:70669): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015535.598:70670): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=292150 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015535.652:70671): pid=292150 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015535.652:70672): pid=292150 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015535.652:70673): pid=292150 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015535.654:70674): pid=292150 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015535.660:70675): pid=292150 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015535.660:70676): pid=292150 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015535.664:70677): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015535.665:70678): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015535.667:70679): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015535.668:70680): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015535.669:70681): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=292168 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015535.728:70682): pid=292168 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015535.728:70683): pid=292168 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015535.729:70684): pid=292168 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015535.731:70685): pid=292168 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015535.734:70686): pid=292168 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015535.734:70687): pid=292168 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015535.738:70688): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015535.738:70689): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015535.741:70690): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015535.742:70691): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015535.743:70692): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=292186 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015535.803:70693): pid=292186 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015535.803:70694): pid=292186 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577202F6574632F636570682F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015535.804:70695): pid=292186 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015535.807:70696): pid=292186 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015535.810:70697): pid=292186 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015535.810:70698): pid=292186 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015535.815:70699): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015535.815:70700): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015535.819:70701): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015535.820:70702): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015535.821:70703): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=292204 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015535.881:70704): pid=292204 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015535.881:70705): pid=292204 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015535.882:70706): pid=292204 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015535.884:70707): pid=292204 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015535.887:70708): pid=292204 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015535.887:70709): pid=292204 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015535.892:70710): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015535.892:70711): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015535.896:70712): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015535.896:70713): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015535.898:70714): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=292222 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015535.961:70715): pid=292222 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015535.962:70716): pid=292222 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015535.962:70717): pid=292222 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015535.965:70718): pid=292222 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015535.968:70719): pid=292222 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015535.968:70720): pid=292222 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015535.972:70721): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015535.972:70722): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015535.976:70723): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015535.976:70724): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015535.978:70725): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=292240 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015536.043:70726): pid=292240 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015536.044:70727): pid=292240 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015536.044:70728): pid=292240 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015536.047:70729): pid=292240 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015536.050:70730): pid=292240 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015536.050:70731): pid=292240 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015536.055:70732): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015536.056:70733): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015536.058:70734): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015536.058:70735): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015536.060:70736): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=292258 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015536.117:70737): pid=292258 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015536.118:70738): pid=292258 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015536.118:70739): pid=292258 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015536.121:70740): pid=292258 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015536.124:70741): pid=292258 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015536.124:70742): pid=292258 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015536.130:70743): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015536.131:70744): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015536.138:70745): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015536.138:70746): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015536.139:70747): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=292276 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015536.200:70748): pid=292276 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015536.200:70749): pid=292276 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015536.200:70750): pid=292276 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015536.202:70751): pid=292276 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015536.205:70752): pid=292276 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015536.205:70753): pid=292276 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015536.210:70754): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015536.210:70755): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015536.215:70756): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015536.216:70757): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015536.217:70758): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=292294 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015536.276:70759): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015536.276:70760): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015536.281:70761): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015536.281:70762): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015536.282:70763): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=292310 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015536.346:70764): pid=292310 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015536.347:70765): pid=292310 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015536.347:70766): pid=292310 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015536.350:70767): pid=292310 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015536.355:70768): pid=292310 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015536.355:70769): pid=292310 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015536.358:70770): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015536.358:70771): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015536.360:70772): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015536.360:70773): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015536.362:70774): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=292328 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015536.421:70775): pid=292328 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015536.421:70776): pid=292328 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015536.422:70777): pid=292328 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015536.424:70778): pid=292328 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015536.427:70779): pid=292328 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015536.427:70780): pid=292328 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015536.431:70781): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015536.431:70782): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015536.437:70783): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015536.437:70784): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015536.438:70785): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=292346 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015536.496:70786): pid=292346 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015536.497:70787): pid=292346 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015536.497:70788): pid=292346 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015536.500:70789): pid=292346 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015536.503:70790): pid=292346 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015536.503:70791): pid=292346 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015536.509:70792): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015536.509:70793): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015542.580:70794): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015542.580:70795): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015542.581:70796): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=292364 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015542.644:70797): pid=292364 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015542.645:70798): pid=292364 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015542.646:70799): pid=292364 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015542.649:70800): pid=292364 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015542.653:70801): pid=292364 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015542.653:70802): pid=292364 uid=1002 auid=1002 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015542.657:70803): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015542.658:70804): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015545.472:70805): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015545.587:70806): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015551.428:70807): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=289236 suid=1002 rport=41756 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015551.429:70808): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=289236 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015551.432:70809): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.106 addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015551.432:70810): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.106 addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015551.433:70811): pid=289233 uid=0 auid=1002 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=289233 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1765015551.731:70812): pid=292401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=292401 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765015551.732:70813): pid=292400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=292401 suid=74 rport=38740 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765015551.732:70814): pid=292400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=292401 suid=74 rport=38740 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765015551.764:70815): pid=292400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="ceph-admin" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015551.764:70816): pid=292400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:1d:06:01:4f:c9:f7:1d:b9:e2:70:3b:4f:f6:d7:a1:77:7f:a0:25:73:05:b6:4c:3e:7d:33:25:99:1d:b0:0a:c1 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015551.775:70817): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015551.779:70818): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765015551.791:70819): pid=292400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.105 addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015551.792:70820): pid=292400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=292401 suid=74 rport=38740 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765015551.795:70821): pid=292400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.105 addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765015551.796:70822): pid=292400 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1002 tty=(none) old-ses=4294967295 ses=65 res=1UID="root" OLD-AUID="unset" AUID="ceph-admin"
type=SYSCALL msg=audit(1765015551.796:70822): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff21e4c220 a2=4 a3=3ea items=0 ppid=182854 pid=292400 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=65 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015551.796:70822): proctitle=737368643A20636570682D61646D696E205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765015551.798:70823): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.105 addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765015551.831:70824): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765015551.841:70825): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.105 addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015551.842:70826): pid=292430 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=292430 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="root"
type=CRED_ACQ msg=audit(1765015551.844:70827): pid=292430 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.105 addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_LOGIN msg=audit(1765015551.889:70828): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015551.889:70829): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015551.890:70830): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=292443 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015551.935:70831): pid=292443 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015551.938:70832): pid=292443 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015551.939:70833): pid=292443 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015551.945:70834): pid=292443 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015551.948:70835): pid=292443 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015551.948:70836): pid=292443 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015551.953:70837): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015551.953:70838): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015551.962:70839): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015551.962:70840): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015551.964:70841): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=292479 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=SERVICE_STOP msg=audit(1765015551.973:70842): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015552.002:70843): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765015552.013:70844): pid=292479 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015552.013:70845): pid=292479 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015552.014:70846): pid=292479 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015552.021:70847): pid=292479 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_STOP msg=audit(1765015552.057:70848): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015553.451:70849): pid=292479 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015553.451:70850): pid=292479 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015553.457:70851): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015553.457:70852): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015553.498:70853): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015553.498:70854): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015553.499:70855): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=292684 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015553.563:70856): pid=292684 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015553.563:70857): pid=292684 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015553.565:70858): pid=292684 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015553.567:70859): pid=292684 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015553.571:70860): pid=292684 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015553.571:70861): pid=292684 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015553.578:70862): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015553.578:70863): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015553.584:70864): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015553.584:70865): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015553.585:70866): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=292702 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015553.659:70867): pid=292702 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015553.659:70868): pid=292702 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015553.659:70869): pid=292702 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015553.662:70870): pid=292702 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015554.298:70871): pid=292702 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015554.298:70872): pid=292702 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015554.361:70873): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015554.361:70874): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015554.418:70875): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015554.418:70876): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015554.419:70877): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=292753 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015554.481:70878): pid=292753 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015554.481:70879): pid=292753 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015554.481:70880): pid=292753 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015554.485:70881): pid=292753 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015554.487:70882): pid=292753 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015554.487:70883): pid=292753 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015554.549:70884): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015554.549:70885): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015554.612:70886): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015554.612:70887): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015554.613:70888): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=292771 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015554.675:70889): pid=292771 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015554.676:70890): pid=292771 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C6973742D6E6574776F726B73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015554.676:70891): pid=292771 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015554.679:70892): pid=292771 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015555.081:70893): pid=292771 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015555.081:70894): pid=292771 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015555.086:70895): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015555.086:70896): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015555.298:70897): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015555.298:70898): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015555.299:70899): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=292808 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015555.363:70900): pid=292808 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015555.363:70901): pid=292808 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015555.364:70902): pid=292808 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015555.367:70903): pid=292808 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015555.370:70904): pid=292808 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015555.371:70905): pid=292808 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015555.379:70906): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015555.379:70907): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015555.388:70908): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015555.388:70909): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015555.390:70910): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=292826 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015555.456:70911): pid=292826 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015555.457:70912): pid=292826 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015555.457:70913): pid=292826 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015555.460:70914): pid=292826 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015555.463:70915): pid=292826 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015555.463:70916): pid=292826 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015555.469:70917): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015555.469:70918): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015555.475:70919): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015555.475:70920): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015555.476:70921): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=292844 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015555.535:70922): pid=292844 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015555.536:70923): pid=292844 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015555.536:70924): pid=292844 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015555.539:70925): pid=292844 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015555.541:70926): pid=292844 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015555.542:70927): pid=292844 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015555.546:70928): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015555.546:70929): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015555.551:70930): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015555.552:70931): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015555.553:70932): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=292862 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015555.612:70933): pid=292862 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015555.612:70934): pid=292862 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015555.613:70935): pid=292862 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015555.615:70936): pid=292862 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015555.619:70937): pid=292862 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015555.619:70938): pid=292862 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015555.623:70939): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015555.623:70940): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015555.626:70941): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015555.626:70942): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015555.627:70943): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=292880 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015555.694:70944): pid=292880 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015555.694:70945): pid=292880 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015555.695:70946): pid=292880 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015555.699:70947): pid=292880 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015555.702:70948): pid=292880 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015555.702:70949): pid=292880 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015555.706:70950): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015555.706:70951): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015555.709:70952): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015555.709:70953): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015555.710:70954): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=292898 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015555.758:70955): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015555.758:70956): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015555.760:70957): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015555.760:70958): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015555.761:70959): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=292914 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015555.823:70960): pid=292914 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015555.824:70961): pid=292914 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015555.824:70962): pid=292914 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015555.827:70963): pid=292914 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015555.832:70964): pid=292914 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015555.832:70965): pid=292914 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015555.836:70966): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015555.836:70967): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015555.839:70968): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015555.839:70969): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015555.841:70970): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=292932 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015555.901:70971): pid=292932 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015555.901:70972): pid=292932 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015555.902:70973): pid=292932 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015555.905:70974): pid=292932 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015555.907:70975): pid=292932 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015555.907:70976): pid=292932 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015555.911:70977): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015555.911:70978): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015555.915:70979): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015555.915:70980): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015555.916:70981): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=292950 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015555.974:70982): pid=292950 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015555.974:70983): pid=292950 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577202F6574632F636570682F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015555.975:70984): pid=292950 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015555.977:70985): pid=292950 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015555.981:70986): pid=292950 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015555.981:70987): pid=292950 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015555.985:70988): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015555.985:70989): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015555.990:70990): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015555.990:70991): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015555.991:70992): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=292968 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015556.052:70993): pid=292968 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015556.052:70994): pid=292968 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015556.053:70995): pid=292968 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015556.055:70996): pid=292968 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015556.058:70997): pid=292968 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015556.058:70998): pid=292968 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015556.063:70999): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015556.063:71000): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015556.066:71001): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015556.067:71002): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015556.068:71003): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=292986 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015556.126:71004): pid=292986 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015556.127:71005): pid=292986 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015556.127:71006): pid=292986 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015556.130:71007): pid=292986 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015556.133:71008): pid=292986 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015556.133:71009): pid=292986 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015556.137:71010): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015556.137:71011): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015556.140:71012): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015556.140:71013): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015556.142:71014): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=293004 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015556.206:71015): pid=293004 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015556.206:71016): pid=293004 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015556.207:71017): pid=293004 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015556.211:71018): pid=293004 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015556.214:71019): pid=293004 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015556.214:71020): pid=293004 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015556.219:71021): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015556.219:71022): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015556.223:71023): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015556.223:71024): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015556.224:71025): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=293022 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015556.282:71026): pid=293022 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015556.283:71027): pid=293022 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015556.283:71028): pid=293022 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015556.286:71029): pid=293022 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015556.287:71030): pid=293022 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015556.288:71031): pid=293022 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015556.293:71032): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015556.293:71033): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015556.297:71034): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015556.297:71035): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015556.299:71036): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=293040 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015556.362:71037): pid=293040 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015556.362:71038): pid=293040 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015556.362:71039): pid=293040 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015556.365:71040): pid=293040 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015556.367:71041): pid=293040 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015556.367:71042): pid=293040 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015556.370:71043): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015556.370:71044): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015556.372:71045): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015556.372:71046): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015556.374:71047): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=293058 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015556.418:71048): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015556.418:71049): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015556.421:71050): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015556.421:71051): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015556.423:71052): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=293074 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015556.481:71053): pid=293074 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015556.481:71054): pid=293074 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015556.482:71055): pid=293074 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015556.486:71056): pid=293074 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015556.491:71057): pid=293074 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015556.491:71058): pid=293074 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015556.496:71059): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015556.496:71060): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015556.501:71061): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015556.501:71062): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015556.502:71063): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=293092 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015556.556:71064): pid=293092 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015556.556:71065): pid=293092 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015556.556:71066): pid=293092 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015556.558:71067): pid=293092 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015556.560:71068): pid=293092 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015556.561:71069): pid=293092 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015556.563:71070): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015556.563:71071): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015556.565:71072): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015556.565:71073): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015556.567:71074): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=293110 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015556.616:71075): pid=293110 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015556.616:71076): pid=293110 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015556.617:71077): pid=293110 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015556.634:71078): pid=293110 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765015556.636:71079): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015556.637:71080): pid=293110 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015556.637:71081): pid=293110 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015556.642:71082): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015556.642:71083): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015556.645:71084): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015556.645:71085): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015556.646:71086): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=293129 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015556.702:71087): pid=293129 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015556.703:71088): pid=293129 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015556.703:71089): pid=293129 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015556.707:71090): pid=293129 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015556.711:71091): pid=293129 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015556.712:71092): pid=293129 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015556.716:71093): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015556.716:71094): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015556.719:71095): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015556.719:71096): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015556.721:71097): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=293162 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=SERVICE_STOP msg=audit(1765015556.750:71098): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765015556.776:71099): pid=293162 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015556.776:71100): pid=293162 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015556.777:71101): pid=293162 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015556.780:71102): pid=293162 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015556.783:71103): pid=293162 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015556.783:71104): pid=293162 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015556.788:71105): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015556.788:71106): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015556.791:71107): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015556.791:71108): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015556.792:71109): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=293183 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015556.845:71110): pid=293183 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015556.845:71111): pid=293183 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015556.845:71112): pid=293183 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015556.847:71113): pid=293183 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015556.850:71114): pid=293183 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015556.850:71115): pid=293183 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015556.854:71116): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015556.854:71117): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015556.857:71118): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015556.857:71119): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015556.859:71120): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=293201 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015556.921:71121): pid=293201 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015556.921:71122): pid=293201 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015556.921:71123): pid=293201 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015556.924:71124): pid=293201 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015556.929:71125): pid=293201 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015556.929:71126): pid=293201 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015556.933:71127): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015556.933:71128): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015556.938:71129): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015556.938:71130): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015556.940:71131): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=293219 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015557.004:71132): pid=293219 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015557.004:71133): pid=293219 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015557.005:71134): pid=293219 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015557.008:71135): pid=293219 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015557.011:71136): pid=293219 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015557.011:71137): pid=293219 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015557.016:71138): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015557.016:71139): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015557.023:71140): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015557.023:71141): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015557.025:71142): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=293237 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015557.070:71143): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015557.071:71144): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015557.072:71145): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015557.073:71146): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015557.075:71147): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=293253 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015557.142:71148): pid=293253 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015557.142:71149): pid=293253 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015557.143:71150): pid=293253 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015557.146:71151): pid=293253 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015557.153:71152): pid=293253 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015557.154:71153): pid=293253 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015557.161:71154): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015557.161:71155): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015557.171:71156): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015557.172:71157): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015557.173:71158): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=293271 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015557.246:71159): pid=293271 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015557.247:71160): pid=293271 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363030202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015557.248:71161): pid=293271 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015557.251:71162): pid=293271 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015557.255:71163): pid=293271 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015557.256:71164): pid=293271 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015557.261:71165): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015557.261:71166): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015557.265:71167): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015557.265:71168): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015557.266:71169): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=293289 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015557.380:71170): pid=293289 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015557.381:71171): pid=293289 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577202F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E67 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015557.381:71172): pid=293289 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015557.384:71173): pid=293289 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015557.386:71174): pid=293289 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015557.386:71175): pid=293289 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015557.390:71176): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015557.390:71177): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015557.394:71178): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015557.394:71179): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015557.395:71180): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=293307 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015557.446:71181): pid=293307 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015557.446:71182): pid=293307 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015557.447:71183): pid=293307 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015557.449:71184): pid=293307 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015557.453:71185): pid=293307 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015557.453:71186): pid=293307 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015557.456:71187): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015557.456:71188): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015557.458:71189): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015557.458:71190): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015557.459:71191): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=293325 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015557.520:71192): pid=293325 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015557.520:71193): pid=293325 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015557.521:71194): pid=293325 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015557.524:71195): pid=293325 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015557.527:71196): pid=293325 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015557.527:71197): pid=293325 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015557.533:71198): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015557.533:71199): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015557.540:71200): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015557.540:71201): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015557.542:71202): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=293343 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015557.609:71203): pid=293343 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015557.609:71204): pid=293343 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015557.610:71205): pid=293343 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015557.613:71206): pid=293343 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015557.616:71207): pid=293343 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015557.617:71208): pid=293343 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015557.621:71209): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015557.621:71210): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015557.624:71211): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015557.624:71212): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015557.626:71213): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=293361 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015557.689:71214): pid=293361 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015557.689:71215): pid=293361 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015557.690:71216): pid=293361 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015557.694:71217): pid=293361 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015557.698:71218): pid=293361 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015557.699:71219): pid=293361 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015557.703:71220): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015557.703:71221): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015557.706:71222): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015557.706:71223): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015557.708:71224): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=293379 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015557.767:71225): pid=293379 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015557.767:71226): pid=293379 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015557.768:71227): pid=293379 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015557.770:71228): pid=293379 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015557.773:71229): pid=293379 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015557.773:71230): pid=293379 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015557.777:71231): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015557.777:71232): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015557.781:71233): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015557.781:71234): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015557.782:71235): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=293397 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015557.827:71236): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015557.828:71237): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015557.835:71238): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015557.835:71239): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015557.837:71240): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=293413 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015557.895:71241): pid=293413 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015557.895:71242): pid=293413 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015557.896:71243): pid=293413 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015557.899:71244): pid=293413 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015557.904:71245): pid=293413 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015557.904:71246): pid=293413 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015557.908:71247): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015557.908:71248): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015557.910:71249): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015557.910:71250): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015557.912:71251): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=293431 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015557.967:71252): pid=293431 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015557.968:71253): pid=293431 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363030202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015557.968:71254): pid=293431 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015557.971:71255): pid=293431 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015557.973:71256): pid=293431 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015557.974:71257): pid=293431 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015557.977:71258): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015557.977:71259): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015557.979:71260): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015557.979:71261): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015557.981:71262): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=293449 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015558.039:71263): pid=293449 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015558.040:71264): pid=293449 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E67 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015558.040:71265): pid=293449 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015558.043:71266): pid=293449 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015558.046:71267): pid=293449 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015558.047:71268): pid=293449 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015558.051:71269): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015558.051:71270): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015558.476:71271): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015558.502:71272): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015558.502:71273): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015558.504:71274): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=293474 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015558.571:71275): pid=293474 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015558.572:71276): pid=293474 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015558.572:71277): pid=293474 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015558.576:71278): pid=293474 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015558.580:71279): pid=293474 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015558.581:71280): pid=293474 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015558.585:71281): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015558.585:71282): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_STOP msg=audit(1765015558.619:71283): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015563.471:71284): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015563.678:71285): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015565.307:71286): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015565.307:71287): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015565.309:71288): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=293535 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015565.372:71289): pid=293535 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015565.372:71290): pid=293535 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015565.373:71291): pid=293535 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015565.375:71292): pid=293535 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015565.378:71293): pid=293535 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015565.378:71294): pid=293535 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015565.383:71295): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015565.383:71296): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015565.386:71297): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015565.386:71298): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015565.387:71299): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=293553 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015565.445:71300): pid=293553 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015565.446:71301): pid=293553 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015565.446:71302): pid=293553 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015565.449:71303): pid=293553 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015565.946:71304): prog-id=2167 op=LOAD
type=SYSCALL msg=audit(1765015565.946:71304): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff95c13150 a2=90 a3=9500000000 items=0 ppid=293603 pid=293604 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=65 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015565.946:71304): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393566353132643033333432636634393331353234623762623737363765
type=BPF msg=audit(1765015566.004:71305): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015566.140:71306): pid=293553 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015566.140:71307): pid=293553 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015566.146:71308): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015566.146:71309): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015566.192:71310): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015566.192:71311): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015566.193:71312): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=293626 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015566.260:71313): pid=293626 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015566.260:71314): pid=293626 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015566.261:71315): pid=293626 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015566.266:71316): pid=293626 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015566.269:71317): pid=293626 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015566.269:71318): pid=293626 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015566.274:71319): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015566.274:71320): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015566.278:71321): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015566.278:71322): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015566.279:71323): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=293644 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015566.344:71324): pid=293644 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015566.344:71325): pid=293644 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015566.345:71326): pid=293644 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015566.347:71327): pid=293644 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015566.858:71328): prog-id=2168 op=LOAD
type=SYSCALL msg=audit(1765015566.858:71328): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff72add2f0 a2=90 a3=9500000000 items=0 ppid=293693 pid=293694 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=65 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015566.858:71328): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F613434333137626262363062363633343235663066623166346166393164
type=BPF msg=audit(1765015566.912:71329): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015567.173:71330): pid=293644 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015567.174:71331): pid=293644 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015567.180:71332): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015567.180:71333): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015567.247:71334): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015567.247:71335): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015567.249:71336): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=293723 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015567.310:71337): pid=293723 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015567.311:71338): pid=293723 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015567.313:71339): pid=293723 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015567.317:71340): pid=293723 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015567.320:71341): pid=293723 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015567.320:71342): pid=293723 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015567.324:71343): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015567.324:71344): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015567.327:71345): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015567.327:71346): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015567.328:71347): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=293741 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015567.389:71348): pid=293741 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015567.389:71349): pid=293741 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935205F6F726368206465706C6F79202D2D667369642031393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015567.390:71350): pid=293741 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015567.392:71351): pid=293741 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015567.898:71352): prog-id=2169 op=LOAD
type=SYSCALL msg=audit(1765015567.898:71352): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff74491db0 a2=90 a3=9500000000 items=0 ppid=293792 pid=293793 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=65 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015567.898:71352): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F366331623335633966333033623062663133313832396236343635323332
type=BPF msg=audit(1765015567.952:71353): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015568.191:71354): pid=293741 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015568.192:71355): pid=293741 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015568.198:71356): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015568.198:71357): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015568.266:71358): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015568.266:71359): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015568.267:71360): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=293822 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015568.332:71361): pid=293822 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015568.332:71362): pid=293822 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015568.333:71363): pid=293822 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015568.337:71364): pid=293822 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015568.340:71365): pid=293822 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015568.340:71366): pid=293822 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015568.344:71367): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015568.345:71368): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015568.347:71369): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015568.348:71370): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015568.349:71371): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=293840 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015568.412:71372): pid=293840 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015568.413:71373): pid=293840 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015568.413:71374): pid=293840 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015568.416:71375): pid=293840 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015568.904:71376): prog-id=2170 op=LOAD
type=SYSCALL msg=audit(1765015568.904:71376): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd2ed06700 a2=90 a3=9500000000 items=0 ppid=293890 pid=293891 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=65 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015568.904:71376): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F343463326638626136346131633731343739393137366238393266356633
type=BPF msg=audit(1765015568.952:71377): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015569.082:71378): pid=293840 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015569.082:71379): pid=293840 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015569.085:71380): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015569.085:71381): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015569.120:71382): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015569.120:71383): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015569.121:71384): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=293912 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015569.177:71385): pid=293912 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015569.177:71386): pid=293912 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015569.178:71387): pid=293912 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015569.182:71388): pid=293912 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015569.185:71389): pid=293912 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015569.185:71390): pid=293912 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015569.188:71391): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015569.189:71392): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015569.192:71393): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015569.192:71394): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015569.193:71395): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=293930 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015569.253:71396): pid=293930 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015569.253:71397): pid=293930 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015569.254:71398): pid=293930 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015569.257:71399): pid=293930 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015569.737:71400): prog-id=2171 op=LOAD
type=SYSCALL msg=audit(1765015569.737:71400): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff9033c810 a2=90 a3=9500000000 items=0 ppid=293979 pid=293980 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=65 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015569.737:71400): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F383630303731633537353536616137306564323966386336383930653035
type=BPF msg=audit(1765015569.781:71401): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015569.917:71402): pid=293930 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015569.918:71403): pid=293930 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015569.923:71404): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015569.923:71405): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015569.965:71406): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015569.965:71407): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015569.966:71408): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=294002 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015570.030:71409): pid=294002 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015570.030:71410): pid=294002 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015570.031:71411): pid=294002 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015570.034:71412): pid=294002 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015570.037:71413): pid=294002 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015570.037:71414): pid=294002 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015570.042:71415): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015570.042:71416): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015570.044:71417): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015570.044:71418): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015570.046:71419): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=294020 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015570.107:71420): pid=294020 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015570.107:71421): pid=294020 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015570.108:71422): pid=294020 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015570.111:71423): pid=294020 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015570.624:71424): prog-id=2172 op=LOAD
type=SYSCALL msg=audit(1765015570.624:71424): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe166968a0 a2=90 a3=9500000000 items=0 ppid=294070 pid=294071 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=65 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015570.624:71424): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F346331353965666638613966613866333562313838323531363936663930
type=BPF msg=audit(1765015570.671:71425): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015570.820:71426): pid=294020 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015570.821:71427): pid=294020 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015570.826:71428): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015570.826:71429): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015571.274:71430): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015571.274:71431): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015571.276:71432): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=294092 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015571.339:71433): pid=294092 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015571.339:71434): pid=294092 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015571.340:71435): pid=294092 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015571.344:71436): pid=294092 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015571.348:71437): pid=294092 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015571.348:71438): pid=294092 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015571.352:71439): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015571.353:71440): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015576.472:71441): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015576.586:71442): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015579.203:71443): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015579.203:71444): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015579.204:71445): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=294128 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015579.266:71446): pid=294128 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015579.266:71447): pid=294128 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015579.268:71448): pid=294128 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015579.272:71449): pid=294128 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015579.275:71450): pid=294128 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015579.275:71451): pid=294128 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015579.281:71452): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015579.281:71453): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015579.294:71454): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015579.294:71455): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015579.295:71456): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=294146 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015579.351:71457): pid=294146 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015579.352:71458): pid=294146 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015579.352:71459): pid=294146 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015579.355:71460): pid=294146 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015579.358:71461): pid=294146 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015579.359:71462): pid=294146 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015579.366:71463): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015579.366:71464): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015579.382:71465): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015579.382:71466): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015579.383:71467): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=294164 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015579.439:71468): pid=294164 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015579.440:71469): pid=294164 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015579.440:71470): pid=294164 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015579.443:71471): pid=294164 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015579.446:71472): pid=294164 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015579.447:71473): pid=294164 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015579.451:71474): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015579.451:71475): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015579.454:71476): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015579.454:71477): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015579.456:71478): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=294182 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015579.512:71479): pid=294182 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015579.512:71480): pid=294182 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015579.513:71481): pid=294182 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015579.515:71482): pid=294182 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015579.519:71483): pid=294182 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015579.519:71484): pid=294182 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015579.523:71485): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015579.523:71486): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015579.526:71487): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015579.526:71488): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015579.528:71489): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=294200 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015579.587:71490): pid=294200 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015579.587:71491): pid=294200 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015579.588:71492): pid=294200 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015579.590:71493): pid=294200 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015579.594:71494): pid=294200 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015579.594:71495): pid=294200 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015579.598:71496): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015579.598:71497): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015579.602:71498): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015579.602:71499): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015579.603:71500): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=294218 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015579.665:71501): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015579.665:71502): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015579.667:71503): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015579.667:71504): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015579.668:71505): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=294234 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015579.727:71506): pid=294234 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015579.727:71507): pid=294234 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015579.727:71508): pid=294234 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015579.730:71509): pid=294234 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015579.735:71510): pid=294234 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015579.736:71511): pid=294234 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015579.739:71512): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015579.739:71513): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015579.742:71514): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015579.742:71515): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015579.743:71516): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=294252 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015579.801:71517): pid=294252 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015579.802:71518): pid=294252 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015579.802:71519): pid=294252 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015579.804:71520): pid=294252 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015579.807:71521): pid=294252 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015579.808:71522): pid=294252 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015579.811:71523): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015579.811:71524): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015579.814:71525): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015579.814:71526): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015579.815:71527): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=294270 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015579.875:71528): pid=294270 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015579.875:71529): pid=294270 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577202F6574632F636570682F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015579.875:71530): pid=294270 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015579.878:71531): pid=294270 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015579.881:71532): pid=294270 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015579.881:71533): pid=294270 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015579.886:71534): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015579.887:71535): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015579.892:71536): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015579.892:71537): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015579.893:71538): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=294288 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015579.954:71539): pid=294288 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015579.954:71540): pid=294288 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015579.955:71541): pid=294288 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015579.958:71542): pid=294288 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015579.961:71543): pid=294288 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015579.961:71544): pid=294288 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015579.969:71545): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015579.969:71546): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015579.977:71547): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015579.977:71548): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015579.978:71549): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=294306 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015580.037:71550): pid=294306 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015580.037:71551): pid=294306 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015580.038:71552): pid=294306 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015580.040:71553): pid=294306 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015580.043:71554): pid=294306 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015580.043:71555): pid=294306 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015580.048:71556): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015580.048:71557): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015580.058:71558): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015580.058:71559): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015580.060:71560): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=294324 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015580.122:71561): pid=294324 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015580.123:71562): pid=294324 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015580.123:71563): pid=294324 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015580.126:71564): pid=294324 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015580.129:71565): pid=294324 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015580.129:71566): pid=294324 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015580.133:71567): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015580.133:71568): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015580.140:71569): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015580.140:71570): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015580.142:71571): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=294342 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015580.198:71572): pid=294342 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015580.198:71573): pid=294342 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015580.199:71574): pid=294342 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015580.202:71575): pid=294342 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015580.204:71576): pid=294342 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015580.204:71577): pid=294342 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015580.208:71578): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015580.209:71579): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015580.211:71580): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015580.211:71581): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015580.213:71582): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=294360 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015580.266:71583): pid=294360 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015580.266:71584): pid=294360 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015580.267:71585): pid=294360 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015580.269:71586): pid=294360 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015580.272:71587): pid=294360 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015580.272:71588): pid=294360 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015580.276:71589): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015580.276:71590): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015580.280:71591): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015580.280:71592): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015580.281:71593): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=294378 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015580.342:71594): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015580.342:71595): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015580.348:71596): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015580.348:71597): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015580.349:71598): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=294394 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015580.403:71599): pid=294394 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015580.403:71600): pid=294394 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015580.404:71601): pid=294394 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015580.406:71602): pid=294394 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015580.411:71603): pid=294394 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015580.411:71604): pid=294394 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015580.415:71605): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015580.415:71606): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015580.417:71607): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015580.417:71608): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015580.419:71609): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=294412 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015580.477:71610): pid=294412 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015580.477:71611): pid=294412 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015580.478:71612): pid=294412 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015580.480:71613): pid=294412 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015580.483:71614): pid=294412 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015580.483:71615): pid=294412 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015580.486:71616): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015580.487:71617): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015580.488:71618): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015580.488:71619): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015580.490:71620): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=294430 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015580.549:71621): pid=294430 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015580.549:71622): pid=294430 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015580.549:71623): pid=294430 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015580.552:71624): pid=294430 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015580.555:71625): pid=294430 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015580.556:71626): pid=294430 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015580.560:71627): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015580.560:71628): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015582.476:71629): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015582.517:71630): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015582.519:71631): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015582.645:71632): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015582.751:71633): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015582.803:71634): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015583.327:71635): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015583.327:71636): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015583.328:71637): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=294506 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015583.389:71638): pid=294506 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015583.389:71639): pid=294506 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015583.390:71640): pid=294506 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015583.394:71641): pid=294506 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015583.398:71642): pid=294506 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015583.398:71643): pid=294506 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015583.402:71644): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015583.402:71645): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015585.264:71646): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015585.264:71647): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015585.266:71648): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=294524 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015585.332:71649): pid=294524 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015585.332:71650): pid=294524 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015585.333:71651): pid=294524 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015585.335:71652): pid=294524 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015585.339:71653): pid=294524 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015585.339:71654): pid=294524 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015585.343:71655): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015585.343:71656): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015587.475:71657): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015587.619:71658): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015589.474:71659): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015589.587:71660): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015594.473:71661): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015594.617:71662): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015600.902:71663): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015600.902:71664): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015600.904:71665): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=294653 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015600.967:71666): pid=294653 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015600.967:71667): pid=294653 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015600.968:71668): pid=294653 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015600.971:71669): pid=294653 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015600.974:71670): pid=294653 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015600.974:71671): pid=294653 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015600.978:71672): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015600.978:71673): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015600.982:71674): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015600.982:71675): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015600.984:71676): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=294671 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015601.048:71677): pid=294671 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015601.049:71678): pid=294671 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015601.049:71679): pid=294671 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015601.052:71680): pid=294671 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015601.546:71681): prog-id=2173 op=LOAD
type=SYSCALL msg=audit(1765015601.546:71681): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd7de964d0 a2=90 a3=9500000000 items=0 ppid=294722 pid=294723 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=65 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015601.546:71681): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F313965343134383863633534366330306464393865636364653039373466
type=BPF msg=audit(1765015601.598:71682): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015601.698:71683): pid=294671 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015601.698:71684): pid=294671 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015601.703:71685): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015601.703:71686): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015601.747:71687): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015601.747:71688): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015601.748:71689): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=294743 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015601.802:71690): pid=294743 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015601.802:71691): pid=294743 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015601.803:71692): pid=294743 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015601.807:71693): pid=294743 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015601.809:71694): pid=294743 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015601.809:71695): pid=294743 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015601.813:71696): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015601.813:71697): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015601.816:71698): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015601.816:71699): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015601.818:71700): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=294761 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015601.867:71701): pid=294761 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015601.868:71702): pid=294761 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015601.868:71703): pid=294761 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015601.870:71704): pid=294761 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015602.363:71705): prog-id=2174 op=LOAD
type=SYSCALL msg=audit(1765015602.363:71705): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffed5c87ca0 a2=90 a3=9500000000 items=0 ppid=294811 pid=294812 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=65 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015602.363:71705): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F376437353034663536363136353266393234343239366537373730323236
type=BPF msg=audit(1765015602.403:71706): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015602.653:71707): pid=294761 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015602.653:71708): pid=294761 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015602.658:71709): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015602.658:71710): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015602.705:71711): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015602.705:71712): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015602.707:71713): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=294840 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015602.768:71714): pid=294840 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015602.768:71715): pid=294840 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015602.769:71716): pid=294840 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015602.772:71717): pid=294840 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015602.774:71718): pid=294840 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015602.774:71719): pid=294840 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015602.778:71720): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015602.778:71721): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015602.781:71722): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015602.781:71723): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015602.783:71724): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=294858 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015602.842:71725): pid=294858 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015602.843:71726): pid=294858 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935205F6F726368206465706C6F79202D2D667369642031393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015602.843:71727): pid=294858 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015602.846:71728): pid=294858 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015603.352:71729): prog-id=2175 op=LOAD
type=SYSCALL msg=audit(1765015603.352:71729): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc362adf60 a2=90 a3=9500000000 items=0 ppid=294907 pid=294908 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=65 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015603.352:71729): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F303764643539356266326333303532653534623038663036353039303366
type=BPF msg=audit(1765015603.405:71730): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015603.666:71731): pid=294858 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015603.666:71732): pid=294858 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015603.672:71733): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015603.672:71734): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015603.724:71735): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015603.724:71736): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015603.726:71737): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=294936 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015603.788:71738): pid=294936 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015603.788:71739): pid=294936 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015603.789:71740): pid=294936 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015603.793:71741): pid=294936 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015603.795:71742): pid=294936 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015603.795:71743): pid=294936 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015603.800:71744): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015603.800:71745): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015603.802:71746): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015603.802:71747): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015603.804:71748): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=294954 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015603.866:71749): pid=294954 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015603.866:71750): pid=294954 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935205F6F726368206465706C6F79202D2D667369642031393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015603.867:71751): pid=294954 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015603.870:71752): pid=294954 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015604.375:71753): prog-id=2176 op=LOAD
type=SYSCALL msg=audit(1765015604.375:71753): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc177b51d0 a2=90 a3=9500000000 items=0 ppid=295003 pid=295004 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=65 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015604.375:71753): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F386564303563313165626263666531396331303931376465396661303838
type=BPF msg=audit(1765015604.799:71754): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015604.937:71755): pid=294954 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015604.937:71756): pid=294954 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015604.942:71757): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015604.942:71758): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015604.987:71759): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015604.987:71760): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015604.988:71761): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=295026 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015605.036:71762): pid=295026 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015605.037:71763): pid=295026 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015605.037:71764): pid=295026 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015605.040:71765): pid=295026 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015605.041:71766): pid=295026 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015605.042:71767): pid=295026 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015605.046:71768): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015605.046:71769): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015605.049:71770): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015605.049:71771): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015605.051:71772): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=295044 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015605.099:71773): pid=295044 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015605.099:71774): pid=295044 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015605.100:71775): pid=295044 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015605.102:71776): pid=295044 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015605.589:71777): prog-id=2177 op=LOAD
type=SYSCALL msg=audit(1765015605.589:71777): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffde77674c0 a2=90 a3=9500000000 items=0 ppid=295095 pid=295096 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=65 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015605.589:71777): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F613936633534653662663734626662323639353466613538616563643361
type=BPF msg=audit(1765015605.649:71778): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015605.778:71779): pid=295044 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015605.778:71780): pid=295044 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015605.783:71781): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015605.783:71782): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015606.141:71783): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015606.141:71784): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015606.143:71785): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=295116 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015606.201:71786): pid=295116 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015606.201:71787): pid=295116 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015606.202:71788): pid=295116 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015606.206:71789): pid=295116 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015606.211:71790): pid=295116 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015606.211:71791): pid=295116 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015606.215:71792): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015606.215:71793): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015607.472:71794): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015607.631:71795): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015612.683:71796): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015612.683:71797): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015612.684:71798): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=295152 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015612.750:71799): pid=295152 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015612.750:71800): pid=295152 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015612.751:71801): pid=295152 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015612.773:71802): pid=295152 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765015612.775:71803): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015612.777:71804): pid=295152 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015612.777:71805): pid=295152 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765015612.778:71806): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015612.781:71807): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015612.781:71808): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015612.784:71809): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015612.784:71810): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015612.786:71811): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=295177 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015612.850:71812): pid=295177 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015612.850:71813): pid=295177 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015612.851:71814): pid=295177 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015612.865:71815): pid=295177 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765015612.866:71816): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015612.869:71817): pid=295177 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015612.869:71818): pid=295177 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015612.874:71819): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015612.875:71820): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015612.877:71821): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015612.877:71822): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015612.878:71823): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=295222 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=SERVICE_STOP msg=audit(1765015612.903:71824): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765015612.933:71825): pid=295222 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015612.933:71826): pid=295222 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015612.935:71827): pid=295222 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015612.938:71828): pid=295222 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015612.941:71829): pid=295222 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015612.941:71830): pid=295222 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015612.945:71831): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015612.945:71832): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015612.948:71833): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015612.948:71834): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015612.950:71835): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=295245 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015613.015:71836): pid=295245 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015613.015:71837): pid=295245 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015613.016:71838): pid=295245 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015613.019:71839): pid=295245 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015613.024:71840): pid=295245 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015613.024:71841): pid=295245 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_STOP msg=audit(1765015613.025:71842): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015613.028:71843): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015613.028:71844): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015613.036:71845): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015613.036:71846): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015613.037:71847): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=295283 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=SERVICE_STOP msg=audit(1765015613.083:71848): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765015613.097:71849): pid=295283 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015613.098:71850): pid=295283 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015613.098:71851): pid=295283 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015613.106:71852): pid=295283 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015613.109:71853): pid=295283 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015613.109:71854): pid=295283 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015613.113:71855): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015613.113:71856): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015613.116:71857): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015613.116:71858): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015613.117:71859): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=295301 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015613.172:71860): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015613.172:71861): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015613.179:71862): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015613.179:71863): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015613.181:71864): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=295317 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015613.239:71865): pid=295317 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015613.239:71866): pid=295317 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015613.240:71867): pid=295317 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015613.243:71868): pid=295317 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015613.248:71869): pid=295317 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015613.249:71870): pid=295317 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015613.253:71871): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015613.253:71872): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015613.257:71873): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015613.257:71874): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015613.259:71875): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=295335 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015613.318:71876): pid=295335 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015613.318:71877): pid=295335 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015613.319:71878): pid=295335 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015613.321:71879): pid=295335 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015613.324:71880): pid=295335 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015613.324:71881): pid=295335 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015613.329:71882): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015613.330:71883): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015613.333:71884): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015613.334:71885): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015613.335:71886): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=295353 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015613.394:71887): pid=295353 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015613.395:71888): pid=295353 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577202F6574632F636570682F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015613.395:71889): pid=295353 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015613.397:71890): pid=295353 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015613.401:71891): pid=295353 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015613.401:71892): pid=295353 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015613.405:71893): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015613.405:71894): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015613.411:71895): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015613.412:71896): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015613.413:71897): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=295371 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015613.472:71898): pid=295371 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015613.472:71899): pid=295371 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015613.473:71900): pid=295371 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015613.475:71901): pid=295371 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015613.478:71902): pid=295371 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015613.479:71903): pid=295371 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015613.483:71904): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015613.483:71905): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015613.486:71906): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015613.486:71907): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015613.487:71908): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=295389 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015613.545:71909): pid=295389 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015613.546:71910): pid=295389 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015613.546:71911): pid=295389 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015613.549:71912): pid=295389 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015613.552:71913): pid=295389 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015613.552:71914): pid=295389 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015613.556:71915): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015613.556:71916): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015613.560:71917): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015613.560:71918): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015613.561:71919): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=295407 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015613.621:71920): pid=295407 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015613.621:71921): pid=295407 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015613.621:71922): pid=295407 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015613.624:71923): pid=295407 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015613.627:71924): pid=295407 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015613.627:71925): pid=295407 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015613.633:71926): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015613.633:71927): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015613.639:71928): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015613.639:71929): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015613.641:71930): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=295425 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015613.700:71931): pid=295425 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015613.700:71932): pid=295425 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015613.700:71933): pid=295425 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015613.703:71934): pid=295425 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015613.706:71935): pid=295425 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015613.706:71936): pid=295425 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015613.710:71937): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015613.710:71938): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015613.718:71939): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015613.718:71940): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015613.720:71941): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=295443 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015613.779:71942): pid=295443 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015613.780:71943): pid=295443 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015613.780:71944): pid=295443 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015613.782:71945): pid=295443 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015613.785:71946): pid=295443 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015613.785:71947): pid=295443 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015613.789:71948): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015613.789:71949): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015613.792:71950): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015613.792:71951): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015613.794:71952): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=295461 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015613.847:71953): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015613.847:71954): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015613.855:71955): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015613.856:71956): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015613.857:71957): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=295477 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015613.919:71958): pid=295477 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015613.919:71959): pid=295477 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015613.920:71960): pid=295477 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015613.922:71961): pid=295477 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015613.927:71962): pid=295477 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015613.927:71963): pid=295477 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015613.967:71964): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015613.967:71965): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015613.972:71966): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015613.972:71967): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015613.975:71968): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=295495 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015614.039:71969): pid=295495 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015614.039:71970): pid=295495 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015614.040:71971): pid=295495 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015614.042:71972): pid=295495 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015614.045:71973): pid=295495 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015614.045:71974): pid=295495 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015614.049:71975): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015614.049:71976): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015614.052:71977): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015614.052:71978): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015614.053:71979): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=295513 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015614.113:71980): pid=295513 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015614.113:71981): pid=295513 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015614.114:71982): pid=295513 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015614.116:71983): pid=295513 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015614.119:71984): pid=295513 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015614.119:71985): pid=295513 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015614.124:71986): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015614.124:71987): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015614.404:71988): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015614.405:71989): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015614.406:71990): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=295531 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015614.466:71991): pid=295531 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015614.466:71992): pid=295531 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015614.467:71993): pid=295531 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015614.470:71994): pid=295531 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015614.473:71995): pid=295531 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015614.473:71996): pid=295531 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015614.477:71997): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015614.477:71998): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015618.471:71999): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015618.597:72000): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015620.472:72001): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015620.599:72002): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015625.474:72003): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015625.683:72004): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015627.193:72005): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015627.193:72006): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015627.195:72007): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=295619 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015627.255:72008): pid=295619 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015627.255:72009): pid=295619 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015627.256:72010): pid=295619 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015627.260:72011): pid=295619 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015627.262:72012): pid=295619 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015627.263:72013): pid=295619 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015627.267:72014): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015627.267:72015): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015627.270:72016): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015627.270:72017): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015627.271:72018): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=295637 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015627.331:72019): pid=295637 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015627.332:72020): pid=295637 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015627.332:72021): pid=295637 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015627.337:72022): pid=295637 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015627.867:72023): prog-id=2178 op=LOAD
type=SYSCALL msg=audit(1765015627.867:72023): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff6bd1fa80 a2=90 a3=9500000000 items=0 ppid=295686 pid=295687 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=65 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015627.867:72023): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F646164333735383965343963306162656135643335353735353261303366
type=BPF msg=audit(1765015627.925:72024): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015628.051:72025): pid=295637 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015628.052:72026): pid=295637 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015628.058:72027): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015628.058:72028): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015628.102:72029): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015628.102:72030): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015628.103:72031): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=295707 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015628.164:72032): pid=295707 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015628.164:72033): pid=295707 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015628.165:72034): pid=295707 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015628.169:72035): pid=295707 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015628.171:72036): pid=295707 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015628.172:72037): pid=295707 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015628.176:72038): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015628.176:72039): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015628.179:72040): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015628.179:72041): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015628.180:72042): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=295725 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015628.242:72043): pid=295725 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015628.242:72044): pid=295725 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015628.243:72045): pid=295725 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015628.245:72046): pid=295725 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015628.767:72047): prog-id=2179 op=LOAD
type=SYSCALL msg=audit(1765015628.767:72047): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd78b7f3d0 a2=90 a3=9500000000 items=0 ppid=295774 pid=295775 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=65 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015628.767:72047): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F333465393032376636663234653530353430306131376631616664623064
type=BPF msg=audit(1765015628.824:72048): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015629.081:72049): pid=295725 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015629.081:72050): pid=295725 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015629.086:72051): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015629.086:72052): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015629.132:72053): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015629.132:72054): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015629.133:72055): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=295802 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015629.184:72056): pid=295802 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015629.184:72057): pid=295802 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015629.186:72058): pid=295802 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015629.189:72059): pid=295802 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015629.192:72060): pid=295802 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015629.192:72061): pid=295802 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015629.196:72062): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015629.196:72063): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015629.199:72064): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015629.199:72065): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015629.201:72066): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=295820 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015629.253:72067): pid=295820 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015629.253:72068): pid=295820 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935205F6F726368206465706C6F79202D2D667369642031393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015629.253:72069): pid=295820 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015629.257:72070): pid=295820 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015629.805:72071): prog-id=2180 op=LOAD
type=SYSCALL msg=audit(1765015629.805:72071): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd92e9df70 a2=90 a3=9500000000 items=0 ppid=295871 pid=295872 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=65 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015629.805:72071): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F663366333438643833383963343964336662663465666431313132353764
type=BPF msg=audit(1765015629.865:72072): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015630.100:72073): pid=295820 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015630.100:72074): pid=295820 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015630.106:72075): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015630.106:72076): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015630.149:72077): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015630.149:72078): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015630.150:72079): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=295900 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015630.211:72080): pid=295900 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015630.211:72081): pid=295900 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015630.212:72082): pid=295900 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015630.216:72083): pid=295900 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015630.218:72084): pid=295900 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015630.219:72085): pid=295900 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015630.222:72086): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015630.223:72087): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015630.226:72088): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015630.226:72089): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015630.227:72090): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=295918 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015630.285:72091): pid=295918 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015630.285:72092): pid=295918 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015630.286:72093): pid=295918 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015630.288:72094): pid=295918 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015630.808:72095): prog-id=2181 op=LOAD
type=SYSCALL msg=audit(1765015630.808:72095): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcf1ca3210 a2=90 a3=9500000000 items=0 ppid=295967 pid=295968 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=65 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015630.808:72095): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F343465363133356135326539323664396433333432376662363361653535
type=BPF msg=audit(1765015630.865:72096): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015631.001:72097): pid=295918 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015631.001:72098): pid=295918 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015631.006:72099): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015631.006:72100): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015631.095:72101): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015631.095:72102): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015631.096:72103): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=295990 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015631.153:72104): pid=295990 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015631.153:72105): pid=295990 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015631.154:72106): pid=295990 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015631.157:72107): pid=295990 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015631.160:72108): pid=295990 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015631.160:72109): pid=295990 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015631.163:72110): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015631.163:72111): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015631.166:72112): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015631.166:72113): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015631.167:72114): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=296008 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015631.220:72115): pid=296008 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015631.221:72116): pid=296008 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935205F6F726368206465706C6F79202D2D667369642031393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015631.222:72117): pid=296008 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015631.224:72118): pid=296008 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015631.690:72119): prog-id=2182 op=LOAD
type=SYSCALL msg=audit(1765015631.690:72119): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff40f76490 a2=90 a3=9500000000 items=0 ppid=296060 pid=296061 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=65 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015631.690:72119): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F633063663666323064656263663335306235356235313631393137303036
type=BPF msg=audit(1765015631.732:72120): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015631.869:72121): pid=296008 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015631.870:72122): pid=296008 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015631.875:72123): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015631.875:72124): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015631.921:72125): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015631.921:72126): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015631.922:72127): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=296082 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015631.987:72128): pid=296082 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015631.987:72129): pid=296082 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015631.989:72130): pid=296082 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015631.992:72131): pid=296082 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015631.995:72132): pid=296082 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015631.996:72133): pid=296082 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015632.000:72134): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015632.000:72135): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015632.013:72136): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015632.013:72137): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015632.014:72138): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=296100 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015632.076:72139): pid=296100 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015632.076:72140): pid=296100 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015632.077:72141): pid=296100 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015632.081:72142): pid=296100 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015632.713:72143): pid=296100 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015632.713:72144): pid=296100 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015632.788:72145): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015632.788:72146): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015634.689:72147): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015634.689:72148): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015634.690:72149): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=296150 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015634.751:72150): pid=296150 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015634.751:72151): pid=296150 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015634.752:72152): pid=296150 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015634.754:72153): pid=296150 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015634.758:72154): pid=296150 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015634.758:72155): pid=296150 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015634.762:72156): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015634.762:72157): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015636.373:72158): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015636.373:72159): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015636.375:72160): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=296168 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015636.437:72161): pid=296168 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015636.438:72162): pid=296168 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015636.438:72163): pid=296168 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015636.441:72164): pid=296168 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015636.444:72165): pid=296168 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015636.445:72166): pid=296168 uid=1002 auid=1002 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015636.449:72167): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015636.449:72168): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015637.910:72169): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=292430 suid=1002 rport=38740 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.105 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015637.912:72170): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=292430 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015637.915:72171): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.105 addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015637.916:72172): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.105 addr=192.168.122.105 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015637.917:72173): pid=292400 uid=0 auid=1002 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=292400 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="root"
type=SERVICE_START msg=audit(1765015637.940:72174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015638.099:72175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015643.485:72176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015643.488:72177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015643.492:72178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015643.603:72179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015643.625:72180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015643.731:72181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015647.976:72182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015648.013:72183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015649.474:72184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015649.596:72185): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015651.469:72186): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015651.598:72187): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015656.215:72188): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015656.346:72189): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015668.477:72190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015668.589:72191): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015674.475:72192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015674.481:72193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015674.484:72194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015674.590:72195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015674.645:72196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015674.709:72197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015680.474:72198): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015680.622:72199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015682.475:72200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015682.590:72201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015686.478:72202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015686.630:72203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015686.785:72204): pid=296655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=296655 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765015686.787:72205): pid=296654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=296655 suid=74 rport=50120 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765015686.787:72206): pid=296654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=296655 suid=74 rport=50120 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765015686.816:72207): pid=296654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="ceph-admin" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015686.816:72208): pid=296654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:1d:06:01:4f:c9:f7:1d:b9:e2:70:3b:4f:f6:d7:a1:77:7f:a0:25:73:05:b6:4c:3e:7d:33:25:99:1d:b0:0a:c1 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765015686.846:72209): pid=296654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.108 addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015686.846:72210): pid=296654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=296655 suid=74 rport=50120 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765015686.848:72211): pid=296654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.108 addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765015686.849:72212): pid=296654 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1002 tty=(none) old-ses=4294967295 ses=66 res=1UID="root" OLD-AUID="unset" AUID="ceph-admin"
type=SYSCALL msg=audit(1765015686.849:72212): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffde4a32850 a2=4 a3=3ea items=0 ppid=182854 pid=296654 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=66 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015686.849:72212): proctitle=737368643A20636570682D61646D696E205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765015686.850:72213): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.108 addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765015686.925:72214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765015686.961:72215): pid=296658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1765015686.961:72216): pid=296658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="ceph-admin" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1765015686.962:72217): pid=296658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765015686.963:72218): pid=296658 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1002 tty=(none) old-ses=4294967295 ses=67 res=1UID="root" OLD-AUID="unset" AUID="ceph-admin"
type=SYSCALL msg=audit(1765015686.963:72218): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7fff23b351c0 a2=4 a3=3ea items=0 ppid=1 pid=296658 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=67 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015686.963:72218): proctitle="(systemd)"
type=USER_START msg=audit(1765015686.966:72219): pid=296658 uid=0 auid=1002 ses=67 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ceph-admin" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765015687.141:72220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765015687.162:72221): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.108 addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015687.163:72222): pid=296673 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=296673 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="root"
type=CRED_ACQ msg=audit(1765015687.165:72223): pid=296673 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.108 addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_LOGIN msg=audit(1765015687.210:72224): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015687.210:72225): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015687.212:72226): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=296674 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015687.282:72227): pid=296674 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015687.283:72228): pid=296674 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015687.284:72229): pid=296674 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015687.289:72230): pid=296674 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015687.291:72231): pid=296674 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015687.292:72232): pid=296674 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015687.296:72233): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015687.296:72234): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015687.298:72235): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015687.299:72236): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015687.300:72237): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=296692 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015687.363:72238): pid=296692 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015687.364:72239): pid=296692 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015687.364:72240): pid=296692 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015687.367:72241): pid=296692 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015689.023:72242): pid=296692 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015689.024:72243): pid=296692 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015689.028:72244): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015689.029:72245): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015689.075:72246): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015689.076:72247): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015689.077:72248): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=296933 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015689.142:72249): pid=296933 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015689.142:72250): pid=296933 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015689.143:72251): pid=296933 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015689.150:72252): pid=296933 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015689.152:72253): pid=296933 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015689.153:72254): pid=296933 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015689.157:72255): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015689.157:72256): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015689.160:72257): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015689.160:72258): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015689.162:72259): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=296951 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015689.228:72260): pid=296951 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015689.229:72261): pid=296951 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015689.229:72262): pid=296951 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015689.233:72263): pid=296951 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015689.857:72264): pid=296951 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015689.857:72265): pid=296951 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015689.884:72266): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015689.885:72267): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015689.889:72268): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015689.889:72269): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015689.891:72270): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297001 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015689.952:72271): pid=297001 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015689.952:72272): pid=297001 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015689.953:72273): pid=297001 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015689.957:72274): pid=297001 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015689.959:72275): pid=297001 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015689.960:72276): pid=297001 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015689.988:72277): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015689.988:72278): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015689.993:72279): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015689.993:72280): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015689.995:72281): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297019 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015690.055:72282): pid=297019 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015690.055:72283): pid=297019 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C6973742D6E6574776F726B73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015690.056:72284): pid=297019 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015690.058:72285): pid=297019 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015690.442:72286): pid=297019 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015690.442:72287): pid=297019 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015690.447:72288): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015690.447:72289): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015690.594:72290): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015690.594:72291): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015690.596:72292): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297057 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015690.659:72293): pid=297057 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015690.659:72294): pid=297057 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015690.660:72295): pid=297057 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015690.664:72296): pid=297057 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015690.667:72297): pid=297057 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015690.667:72298): pid=297057 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015690.674:72299): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015690.674:72300): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015690.684:72301): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015690.684:72302): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015690.686:72303): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297075 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015690.750:72304): pid=297075 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015690.750:72305): pid=297075 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015690.751:72306): pid=297075 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015690.754:72307): pid=297075 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015690.757:72308): pid=297075 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015690.758:72309): pid=297075 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015690.762:72310): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015690.762:72311): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015690.767:72312): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015690.767:72313): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015690.769:72314): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297093 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015690.830:72315): pid=297093 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015690.830:72316): pid=297093 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015690.831:72317): pid=297093 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015690.834:72318): pid=297093 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015690.837:72319): pid=297093 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015690.837:72320): pid=297093 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015690.842:72321): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015690.843:72322): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015690.849:72323): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015690.849:72324): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015690.850:72325): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297111 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015690.909:72326): pid=297111 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015690.910:72327): pid=297111 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015690.910:72328): pid=297111 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015690.913:72329): pid=297111 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015690.916:72330): pid=297111 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015690.917:72331): pid=297111 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015690.922:72332): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015690.922:72333): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015690.930:72334): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015690.930:72335): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015690.931:72336): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297129 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015690.990:72337): pid=297129 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015690.990:72338): pid=297129 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015690.991:72339): pid=297129 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015690.995:72340): pid=297129 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015690.998:72341): pid=297129 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015690.998:72342): pid=297129 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015691.002:72343): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015691.003:72344): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015691.008:72345): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015691.008:72346): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015691.009:72347): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297147 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015691.061:72348): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015691.061:72349): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015691.064:72350): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015691.064:72351): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015691.066:72352): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297163 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015691.126:72353): pid=297163 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015691.126:72354): pid=297163 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015691.127:72355): pid=297163 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015691.130:72356): pid=297163 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015691.135:72357): pid=297163 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015691.135:72358): pid=297163 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015691.142:72359): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015691.142:72360): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015691.149:72361): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015691.150:72362): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015691.151:72363): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297181 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015691.209:72364): pid=297181 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015691.209:72365): pid=297181 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015691.210:72366): pid=297181 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015691.212:72367): pid=297181 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015691.215:72368): pid=297181 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015691.215:72369): pid=297181 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015691.220:72370): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015691.220:72371): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015691.230:72372): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015691.230:72373): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015691.232:72374): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297199 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015691.299:72375): pid=297199 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015691.299:72376): pid=297199 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577202F6574632F636570682F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015691.300:72377): pid=297199 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015691.303:72378): pid=297199 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015691.309:72379): pid=297199 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015691.309:72380): pid=297199 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015691.314:72381): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015691.314:72382): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015691.327:72383): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015691.327:72384): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015691.329:72385): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297217 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015691.401:72386): pid=297217 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015691.401:72387): pid=297217 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015691.402:72388): pid=297217 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015691.406:72389): pid=297217 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015691.409:72390): pid=297217 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015691.410:72391): pid=297217 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015691.415:72392): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015691.415:72393): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015691.418:72394): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015691.419:72395): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015691.420:72396): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297235 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015691.485:72397): pid=297235 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015691.485:72398): pid=297235 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015691.486:72399): pid=297235 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015691.488:72400): pid=297235 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015691.491:72401): pid=297235 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015691.492:72402): pid=297235 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015691.497:72403): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015691.497:72404): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015691.501:72405): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015691.501:72406): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015691.503:72407): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297253 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015691.571:72408): pid=297253 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015691.571:72409): pid=297253 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015691.572:72410): pid=297253 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015691.575:72411): pid=297253 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015691.578:72412): pid=297253 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015691.578:72413): pid=297253 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015691.582:72414): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015691.582:72415): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015691.585:72416): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015691.585:72417): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015691.586:72418): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297271 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015691.654:72419): pid=297271 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015691.654:72420): pid=297271 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015691.655:72421): pid=297271 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015691.658:72422): pid=297271 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015691.663:72423): pid=297271 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015691.663:72424): pid=297271 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015691.669:72425): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015691.670:72426): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015691.673:72427): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015691.673:72428): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015691.675:72429): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297289 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015691.743:72430): pid=297289 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015691.743:72431): pid=297289 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015691.744:72432): pid=297289 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015691.747:72433): pid=297289 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015691.751:72434): pid=297289 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015691.751:72435): pid=297289 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015691.755:72436): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015691.756:72437): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015691.761:72438): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015691.761:72439): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015691.762:72440): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297307 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015691.810:72441): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015691.810:72442): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015691.813:72443): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015691.813:72444): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015691.815:72445): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297323 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015691.883:72446): pid=297323 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015691.883:72447): pid=297323 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015691.884:72448): pid=297323 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015691.886:72449): pid=297323 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015691.892:72450): pid=297323 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015691.893:72451): pid=297323 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015691.897:72452): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015691.897:72453): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015691.902:72454): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015691.902:72455): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015691.905:72456): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297341 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015691.995:72457): pid=297341 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015691.995:72458): pid=297341 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015691.996:72459): pid=297341 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015691.998:72460): pid=297341 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015692.001:72461): pid=297341 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015692.001:72462): pid=297341 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015692.006:72463): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015692.007:72464): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015692.012:72465): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015692.012:72466): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015692.014:72467): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297359 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015692.079:72468): pid=297359 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015692.079:72469): pid=297359 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015692.080:72470): pid=297359 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015692.083:72471): pid=297359 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015692.087:72472): pid=297359 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015692.087:72473): pid=297359 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015692.094:72474): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015692.094:72475): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015692.108:72476): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015692.108:72477): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015692.110:72478): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297377 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015692.176:72479): pid=297377 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015692.176:72480): pid=297377 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015692.178:72481): pid=297377 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015692.181:72482): pid=297377 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015692.185:72483): pid=297377 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015692.185:72484): pid=297377 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015692.189:72485): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015692.189:72486): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015692.193:72487): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015692.193:72488): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015692.195:72489): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297395 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015692.247:72490): pid=297395 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015692.247:72491): pid=297395 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015692.248:72492): pid=297395 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015692.251:72493): pid=297395 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015692.253:72494): pid=297395 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015692.253:72495): pid=297395 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015692.259:72496): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015692.259:72497): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015692.270:72498): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015692.270:72499): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015692.272:72500): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297413 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015692.337:72501): pid=297413 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015692.337:72502): pid=297413 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015692.338:72503): pid=297413 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015692.341:72504): pid=297413 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015692.344:72505): pid=297413 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015692.344:72506): pid=297413 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015692.348:72507): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015692.348:72508): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015692.355:72509): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015692.356:72510): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015692.357:72511): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297431 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015692.425:72512): pid=297431 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015692.425:72513): pid=297431 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015692.426:72514): pid=297431 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015692.428:72515): pid=297431 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015692.432:72516): pid=297431 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015692.432:72517): pid=297431 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015692.436:72518): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015692.436:72519): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015692.438:72520): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015692.438:72521): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015692.439:72522): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297449 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015692.506:72523): pid=297449 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015692.507:72524): pid=297449 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015692.507:72525): pid=297449 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015692.509:72526): pid=297449 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015692.512:72527): pid=297449 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015692.513:72528): pid=297449 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015692.516:72529): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015692.516:72530): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015692.520:72531): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015692.520:72532): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015692.522:72533): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297467 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015692.570:72534): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015692.570:72535): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015692.572:72536): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015692.572:72537): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015692.574:72538): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297483 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015692.638:72539): pid=297483 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015692.638:72540): pid=297483 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015692.639:72541): pid=297483 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015692.641:72542): pid=297483 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015692.647:72543): pid=297483 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015692.647:72544): pid=297483 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015692.651:72545): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015692.651:72546): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015692.654:72547): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015692.654:72548): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015692.655:72549): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297501 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015692.721:72550): pid=297501 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015692.721:72551): pid=297501 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363030202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015692.722:72552): pid=297501 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015692.724:72553): pid=297501 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015692.727:72554): pid=297501 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015692.727:72555): pid=297501 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015692.731:72556): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015692.731:72557): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015692.734:72558): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015692.735:72559): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015692.736:72560): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297519 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015692.800:72561): pid=297519 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015692.801:72562): pid=297519 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577202F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E67 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015692.801:72563): pid=297519 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015692.804:72564): pid=297519 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015692.807:72565): pid=297519 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015692.807:72566): pid=297519 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015692.813:72567): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015692.813:72568): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015692.818:72569): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015692.819:72570): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015692.820:72571): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297537 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015692.883:72572): pid=297537 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015692.883:72573): pid=297537 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015692.884:72574): pid=297537 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015692.886:72575): pid=297537 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015692.889:72576): pid=297537 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015692.890:72577): pid=297537 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015692.894:72578): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015692.895:72579): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015692.898:72580): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015692.898:72581): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015692.900:72582): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297555 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015692.963:72583): pid=297555 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015692.963:72584): pid=297555 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015692.964:72585): pid=297555 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015692.967:72586): pid=297555 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015692.970:72587): pid=297555 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015692.970:72588): pid=297555 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015692.974:72589): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015692.974:72590): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015692.977:72591): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015692.977:72592): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015692.979:72593): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297573 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015693.032:72594): pid=297573 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015693.032:72595): pid=297573 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015693.033:72596): pid=297573 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015693.035:72597): pid=297573 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015693.038:72598): pid=297573 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015693.038:72599): pid=297573 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015693.042:72600): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015693.042:72601): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015693.046:72602): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015693.046:72603): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015693.048:72604): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297591 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015693.111:72605): pid=297591 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015693.111:72606): pid=297591 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015693.111:72607): pid=297591 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015693.113:72608): pid=297591 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015693.116:72609): pid=297591 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015693.116:72610): pid=297591 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015693.120:72611): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015693.120:72612): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015693.122:72613): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015693.122:72614): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015693.123:72615): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297609 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015693.174:72616): pid=297609 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015693.175:72617): pid=297609 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015693.175:72618): pid=297609 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015693.177:72619): pid=297609 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015693.179:72620): pid=297609 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015693.179:72621): pid=297609 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015693.185:72622): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015693.185:72623): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015693.187:72624): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015693.187:72625): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015693.188:72626): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297627 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015693.223:72627): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015693.224:72628): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015693.225:72629): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015693.226:72630): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015693.227:72631): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297643 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015693.269:72632): pid=297643 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015693.269:72633): pid=297643 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015693.270:72634): pid=297643 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015693.272:72635): pid=297643 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015693.275:72636): pid=297643 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015693.275:72637): pid=297643 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015693.278:72638): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015693.278:72639): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015693.280:72640): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015693.280:72641): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015693.281:72642): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297661 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015693.333:72643): pid=297661 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015693.333:72644): pid=297661 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363030202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015693.333:72645): pid=297661 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015693.335:72646): pid=297661 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015693.337:72647): pid=297661 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015693.337:72648): pid=297661 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015693.341:72649): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015693.341:72650): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015693.343:72651): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015693.344:72652): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015693.345:72653): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297679 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015693.406:72654): pid=297679 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015693.407:72655): pid=297679 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E67 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015693.407:72656): pid=297679 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015693.410:72657): pid=297679 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015693.414:72658): pid=297679 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015693.415:72659): pid=297679 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015693.419:72660): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015693.419:72661): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015693.749:72662): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015693.749:72663): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015693.750:72664): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297697 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015693.816:72665): pid=297697 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015693.816:72666): pid=297697 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015693.817:72667): pid=297697 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015693.821:72668): pid=297697 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015693.826:72669): pid=297697 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015693.826:72670): pid=297697 uid=1002 auid=1002 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015693.831:72671): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015693.831:72672): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015699.506:72673): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015699.630:72674): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015700.531:72675): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=296673 suid=1002 rport=50120 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015700.532:72676): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=296673 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015700.535:72677): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.108 addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015700.536:72678): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.108 addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015700.537:72679): pid=296654 uid=0 auid=1002 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=296654 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1765015700.884:72680): pid=297759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297759 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765015700.885:72681): pid=297758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=297759 suid=74 rport=34020 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765015700.886:72682): pid=297758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=297759 suid=74 rport=34020 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765015700.913:72683): pid=297758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="ceph-admin" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015700.913:72684): pid=297758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:1d:06:01:4f:c9:f7:1d:b9:e2:70:3b:4f:f6:d7:a1:77:7f:a0:25:73:05:b6:4c:3e:7d:33:25:99:1d:b0:0a:c1 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765015700.941:72685): pid=297758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.107 addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015700.942:72686): pid=297758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=297759 suid=74 rport=34020 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765015700.944:72687): pid=297758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.107 addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765015700.944:72688): pid=297758 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1002 tty=(none) old-ses=4294967295 ses=68 res=1UID="root" OLD-AUID="unset" AUID="ceph-admin"
type=SYSCALL msg=audit(1765015700.944:72688): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff2ab61430 a2=4 a3=3ea items=0 ppid=182854 pid=297758 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=68 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015700.944:72688): proctitle=737368643A20636570682D61646D696E205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765015700.946:72689): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.107 addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_START msg=audit(1765015700.992:72690): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.107 addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015700.993:72691): pid=297761 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297761 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="root"
type=CRED_ACQ msg=audit(1765015700.995:72692): pid=297761 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.107 addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_LOGIN msg=audit(1765015701.041:72693): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015701.041:72694): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015701.044:72695): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297762 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015701.119:72696): pid=297762 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015701.119:72697): pid=297762 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015701.121:72698): pid=297762 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015701.127:72699): pid=297762 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015701.130:72700): pid=297762 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015701.131:72701): pid=297762 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015701.135:72702): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015701.135:72703): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015701.139:72704): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015701.139:72705): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015701.140:72706): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297780 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015701.208:72707): pid=297780 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015701.208:72708): pid=297780 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015701.209:72709): pid=297780 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015701.212:72710): pid=297780 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015702.891:72711): pid=297780 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015702.891:72712): pid=297780 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015702.896:72713): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015702.896:72714): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015702.937:72715): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015702.937:72716): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015702.938:72717): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297993 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015703.000:72718): pid=297993 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015703.000:72719): pid=297993 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015703.001:72720): pid=297993 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015703.005:72721): pid=297993 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015703.008:72722): pid=297993 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015703.008:72723): pid=297993 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015703.012:72724): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015703.012:72725): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015703.015:72726): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015703.015:72727): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015703.017:72728): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298011 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015703.072:72729): pid=298011 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015703.072:72730): pid=298011 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015703.073:72731): pid=298011 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015703.077:72732): pid=298011 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015703.692:72733): pid=298011 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015703.692:72734): pid=298011 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015703.758:72735): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015703.758:72736): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015703.761:72737): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015703.761:72738): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015703.762:72739): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298061 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015703.813:72740): pid=298061 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015703.813:72741): pid=298061 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015703.815:72742): pid=298061 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015703.817:72743): pid=298061 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015703.819:72744): pid=298061 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015703.820:72745): pid=298061 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015703.822:72746): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015703.823:72747): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015703.824:72748): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015703.825:72749): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015703.826:72750): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298079 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015703.880:72751): pid=298079 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015703.880:72752): pid=298079 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C6973742D6E6574776F726B73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015703.880:72753): pid=298079 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015703.883:72754): pid=298079 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015704.279:72755): pid=298079 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015704.279:72756): pid=298079 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015704.284:72757): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015704.284:72758): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015704.351:72759): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015704.351:72760): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015704.353:72761): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298116 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015704.414:72762): pid=298116 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015704.414:72763): pid=298116 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015704.414:72764): pid=298116 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015704.417:72765): pid=298116 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015704.420:72766): pid=298116 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015704.420:72767): pid=298116 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015704.429:72768): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015704.430:72769): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015704.441:72770): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015704.441:72771): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015704.442:72772): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298134 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015704.503:72773): pid=298134 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015704.503:72774): pid=298134 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015704.542:72775): pid=298134 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015704.544:72776): pid=298134 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015704.548:72777): pid=298134 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015704.548:72778): pid=298134 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015704.553:72779): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015704.553:72780): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015704.556:72781): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015704.557:72782): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015704.558:72783): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298152 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015704.628:72784): pid=298152 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015704.628:72785): pid=298152 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015704.629:72786): pid=298152 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015704.639:72787): pid=298152 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765015704.642:72788): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015704.643:72789): pid=298152 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015704.643:72790): pid=298152 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015704.657:72791): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015704.657:72792): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015704.660:72793): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015704.660:72794): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015704.662:72795): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298176 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015704.733:72796): pid=298176 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015704.734:72797): pid=298176 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015704.735:72798): pid=298176 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765015704.754:72799): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015704.757:72800): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765015704.770:72801): pid=298176 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015704.774:72802): pid=298176 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015704.775:72803): pid=298176 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015704.780:72804): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015704.780:72805): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015704.785:72806): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015704.785:72807): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015704.787:72808): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298228 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015704.864:72809): pid=298228 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015704.864:72810): pid=298228 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015704.864:72811): pid=298228 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015704.866:72812): pid=298228 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015704.869:72813): pid=298228 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015704.869:72814): pid=298228 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015704.875:72815): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015704.875:72816): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015704.878:72817): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015704.879:72818): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015704.880:72819): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298267 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=SERVICE_STOP msg=audit(1765015704.911:72820): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015704.916:72821): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015704.937:72822): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015704.937:72823): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015704.940:72824): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015704.940:72825): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015704.942:72826): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298284 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=SERVICE_STOP msg=audit(1765015704.995:72827): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765015705.010:72828): pid=298284 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015705.011:72829): pid=298284 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015705.011:72830): pid=298284 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015705.018:72831): pid=298284 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015705.024:72832): pid=298284 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015705.024:72833): pid=298284 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015705.028:72834): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015705.029:72835): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015705.031:72836): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015705.032:72837): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015705.033:72838): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298302 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015705.087:72839): pid=298302 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015705.087:72840): pid=298302 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015705.088:72841): pid=298302 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015705.090:72842): pid=298302 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015705.092:72843): pid=298302 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015705.092:72844): pid=298302 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015705.097:72845): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015705.097:72846): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015705.102:72847): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015705.103:72848): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015705.104:72849): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298320 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015705.154:72850): pid=298320 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015705.154:72851): pid=298320 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577202F6574632F636570682F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015705.155:72852): pid=298320 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015705.157:72853): pid=298320 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015705.160:72854): pid=298320 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015705.160:72855): pid=298320 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015705.164:72856): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015705.165:72857): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015705.169:72858): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015705.169:72859): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015705.171:72860): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298338 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015705.232:72861): pid=298338 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015705.232:72862): pid=298338 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015705.233:72863): pid=298338 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015705.236:72864): pid=298338 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015705.240:72865): pid=298338 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015705.240:72866): pid=298338 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015705.245:72867): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015705.245:72868): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015705.248:72869): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015705.248:72870): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015705.249:72871): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298356 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015705.305:72872): pid=298356 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015705.305:72873): pid=298356 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015705.305:72874): pid=298356 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015705.308:72875): pid=298356 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015705.311:72876): pid=298356 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015705.311:72877): pid=298356 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015705.316:72878): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015705.316:72879): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015705.321:72880): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015705.321:72881): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015705.322:72882): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298374 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015705.386:72883): pid=298374 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015705.387:72884): pid=298374 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015705.387:72885): pid=298374 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015705.390:72886): pid=298374 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015705.393:72887): pid=298374 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015705.393:72888): pid=298374 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015705.398:72889): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015705.398:72890): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015705.401:72891): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015705.401:72892): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015705.402:72893): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298392 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015705.455:72894): pid=298392 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015705.455:72895): pid=298392 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015705.456:72896): pid=298392 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015705.459:72897): pid=298392 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015705.462:72898): pid=298392 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015705.462:72899): pid=298392 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015705.470:72900): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015705.470:72901): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015705.480:72902): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015705.480:72903): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015705.481:72904): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298410 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015705.532:72905): pid=298410 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015705.532:72906): pid=298410 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015705.533:72907): pid=298410 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015705.535:72908): pid=298410 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015705.537:72909): pid=298410 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015705.537:72910): pid=298410 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015705.541:72911): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015705.541:72912): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015705.544:72913): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015705.544:72914): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015705.545:72915): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298428 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015705.594:72916): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015705.594:72917): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015705.598:72918): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015705.598:72919): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015705.599:72920): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298444 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015705.660:72921): pid=298444 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015705.660:72922): pid=298444 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015705.660:72923): pid=298444 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015705.663:72924): pid=298444 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015705.667:72925): pid=298444 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015705.667:72926): pid=298444 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015705.672:72927): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015705.672:72928): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015705.675:72929): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015705.675:72930): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015705.676:72931): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298462 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015705.727:72932): pid=298462 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015705.727:72933): pid=298462 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015705.728:72934): pid=298462 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015705.730:72935): pid=298462 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015705.733:72936): pid=298462 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015705.733:72937): pid=298462 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015705.738:72938): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015705.738:72939): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015705.741:72940): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015705.741:72941): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015705.742:72942): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298480 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015705.804:72943): pid=298480 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015705.804:72944): pid=298480 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015705.805:72945): pid=298480 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015705.808:72946): pid=298480 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015705.811:72947): pid=298480 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015705.811:72948): pid=298480 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015705.816:72949): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015705.816:72950): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015705.820:72951): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015705.820:72952): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015705.822:72953): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298498 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015705.880:72954): pid=298498 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015705.880:72955): pid=298498 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015705.881:72956): pid=298498 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015705.883:72957): pid=298498 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015705.886:72958): pid=298498 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015705.886:72959): pid=298498 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015705.891:72960): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015705.891:72961): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015705.894:72962): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015705.894:72963): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015705.895:72964): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298516 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015705.947:72965): pid=298516 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015705.947:72966): pid=298516 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015705.949:72967): pid=298516 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015705.950:72968): pid=298516 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015705.953:72969): pid=298516 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015705.953:72970): pid=298516 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015705.959:72971): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015705.959:72972): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015705.963:72973): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015705.963:72974): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015705.964:72975): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298534 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015706.027:72976): pid=298534 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015706.027:72977): pid=298534 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015706.028:72978): pid=298534 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015706.031:72979): pid=298534 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015706.034:72980): pid=298534 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015706.034:72981): pid=298534 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015706.038:72982): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015706.038:72983): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015706.041:72984): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015706.041:72985): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015706.043:72986): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298552 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015706.102:72987): pid=298552 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015706.102:72988): pid=298552 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015706.102:72989): pid=298552 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015706.105:72990): pid=298552 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015706.109:72991): pid=298552 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015706.109:72992): pid=298552 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015706.113:72993): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015706.114:72994): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015706.116:72995): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015706.117:72996): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015706.118:72997): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298570 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015706.185:72998): pid=298570 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015706.185:72999): pid=298570 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015706.186:73000): pid=298570 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015706.189:73001): pid=298570 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015706.192:73002): pid=298570 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015706.192:73003): pid=298570 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015706.196:73004): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015706.196:73005): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015706.200:73006): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015706.200:73007): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015706.202:73008): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298588 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015706.262:73009): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015706.262:73010): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015706.265:73011): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015706.265:73012): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015706.266:73013): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298604 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015706.330:73014): pid=298604 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015706.330:73015): pid=298604 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015706.331:73016): pid=298604 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015706.334:73017): pid=298604 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015706.340:73018): pid=298604 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015706.340:73019): pid=298604 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015706.343:73020): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015706.343:73021): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015706.345:73022): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015706.345:73023): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015706.347:73024): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298622 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015706.412:73025): pid=298622 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015706.413:73026): pid=298622 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363030202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015706.413:73027): pid=298622 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015706.415:73028): pid=298622 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015706.418:73029): pid=298622 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015706.418:73030): pid=298622 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015706.423:73031): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015706.423:73032): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015706.428:73033): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015706.428:73034): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015706.429:73035): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298640 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015706.489:73036): pid=298640 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015706.490:73037): pid=298640 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577202F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E67 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015706.490:73038): pid=298640 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015706.493:73039): pid=298640 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015706.496:73040): pid=298640 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015706.497:73041): pid=298640 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015706.501:73042): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015706.501:73043): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015706.510:73044): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015706.511:73045): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015706.512:73046): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298658 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015706.578:73047): pid=298658 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015706.578:73048): pid=298658 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015706.579:73049): pid=298658 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015706.581:73050): pid=298658 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015706.585:73051): pid=298658 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015706.585:73052): pid=298658 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015706.590:73053): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015706.590:73054): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015706.596:73055): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015706.596:73056): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015706.597:73057): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298676 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015706.658:73058): pid=298676 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015706.659:73059): pid=298676 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015706.659:73060): pid=298676 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015706.662:73061): pid=298676 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015706.665:73062): pid=298676 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015706.665:73063): pid=298676 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015706.668:73064): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015706.668:73065): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015706.670:73066): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015706.671:73067): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015706.672:73068): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298694 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015706.743:73069): pid=298694 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015706.743:73070): pid=298694 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015706.744:73071): pid=298694 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015706.748:73072): pid=298694 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015706.751:73073): pid=298694 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015706.751:73074): pid=298694 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015706.757:73075): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015706.757:73076): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015706.764:73077): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015706.764:73078): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015706.766:73079): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298712 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015706.827:73080): pid=298712 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015706.827:73081): pid=298712 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015706.828:73082): pid=298712 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015706.830:73083): pid=298712 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015706.834:73084): pid=298712 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015706.834:73085): pid=298712 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015706.841:73086): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015706.842:73087): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015706.849:73088): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015706.849:73089): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015706.851:73090): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298730 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015706.909:73091): pid=298730 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015706.909:73092): pid=298730 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015706.910:73093): pid=298730 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015706.912:73094): pid=298730 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015706.915:73095): pid=298730 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015706.915:73096): pid=298730 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015706.919:73097): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015706.919:73098): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015706.923:73099): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015706.923:73100): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015706.925:73101): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298748 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015707.007:73102): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015707.007:73103): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015707.012:73104): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015707.013:73105): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015707.014:73106): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298764 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015707.076:73107): pid=298764 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015707.076:73108): pid=298764 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015707.077:73109): pid=298764 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015707.079:73110): pid=298764 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015707.082:73111): pid=298764 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015707.083:73112): pid=298764 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015707.087:73113): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015707.087:73114): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015707.091:73115): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015707.091:73116): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015707.093:73117): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298782 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015707.146:73118): pid=298782 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015707.147:73119): pid=298782 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363030202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015707.147:73120): pid=298782 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015707.149:73121): pid=298782 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015707.151:73122): pid=298782 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015707.151:73123): pid=298782 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015707.155:73124): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015707.155:73125): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015707.159:73126): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015707.159:73127): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015707.164:73128): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298800 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015707.227:73129): pid=298800 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015707.227:73130): pid=298800 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E67 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015707.228:73131): pid=298800 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015707.230:73132): pid=298800 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015707.234:73133): pid=298800 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015707.234:73134): pid=298800 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015707.239:73135): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015707.239:73136): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015707.544:73137): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015707.544:73138): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015707.545:73139): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298818 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015707.603:73140): pid=298818 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015707.604:73141): pid=298818 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015707.604:73142): pid=298818 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015707.606:73143): pid=298818 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015707.609:73144): pid=298818 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015707.610:73145): pid=298818 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015707.614:73146): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015707.614:73147): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015711.471:73148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015711.598:73149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015713.475:73150): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015713.605:73151): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015715.404:73152): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015715.404:73153): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015715.405:73154): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298924 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015715.469:73155): pid=298924 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015715.469:73156): pid=298924 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015715.470:73157): pid=298924 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015715.473:73158): pid=298924 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015715.476:73159): pid=298924 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015715.476:73160): pid=298924 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015715.479:73161): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015715.479:73162): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015715.481:73163): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015715.481:73164): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015715.482:73165): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=298942 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015715.544:73166): pid=298942 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015715.544:73167): pid=298942 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015715.545:73168): pid=298942 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015715.547:73169): pid=298942 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015716.056:73170): prog-id=2183 op=LOAD
type=SYSCALL msg=audit(1765015716.056:73170): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdef32c4f0 a2=90 a3=9500000000 items=0 ppid=298992 pid=298993 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=68 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015716.056:73170): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F303163616661386264353533336537626330656334376338636433653864
type=BPF msg=audit(1765015716.109:73171): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015716.260:73172): pid=298942 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015716.260:73173): pid=298942 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015716.266:73174): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015716.266:73175): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015716.327:73176): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015716.327:73177): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015716.329:73178): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299013 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015716.402:73179): pid=299013 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015716.402:73180): pid=299013 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015716.404:73181): pid=299013 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015716.409:73182): pid=299013 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015716.411:73183): pid=299013 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015716.412:73184): pid=299013 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015716.417:73185): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015716.417:73186): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015716.422:73187): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015716.422:73188): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015716.424:73189): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299031 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015716.487:73190): pid=299031 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015716.487:73191): pid=299031 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015716.488:73192): pid=299031 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015716.491:73193): pid=299031 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765015716.868:73194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015717.023:73195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765015717.124:73196): prog-id=2184 op=LOAD
type=SYSCALL msg=audit(1765015717.124:73196): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc024d48e0 a2=90 a3=9500000000 items=0 ppid=299106 pid=299107 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=68 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015717.124:73196): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F653233663061353332303762643733623334613939383963333231396339
type=BPF msg=audit(1765015717.171:73197): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015717.430:73198): pid=299031 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015717.431:73199): pid=299031 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015717.437:73200): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015717.437:73201): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015721.483:73202): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015721.483:73203): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015721.484:73204): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299136 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015721.547:73205): pid=299136 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015721.548:73206): pid=299136 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015721.550:73207): pid=299136 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015721.555:73208): pid=299136 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015721.557:73209): pid=299136 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015721.558:73210): pid=299136 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015721.562:73211): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015721.562:73212): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015721.565:73213): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015721.565:73214): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015721.567:73215): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299154 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015721.626:73216): pid=299154 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015721.626:73217): pid=299154 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015721.627:73218): pid=299154 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015721.630:73219): pid=299154 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015722.162:73220): prog-id=2185 op=LOAD
type=SYSCALL msg=audit(1765015722.162:73220): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc724e6240 a2=90 a3=9500000000 items=0 ppid=299203 pid=299204 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=68 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015722.162:73220): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F343132306563343764363262663033613738643463626133623732643535
type=BPF msg=audit(1765015722.228:73221): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015722.469:73222): pid=299154 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015722.469:73223): pid=299154 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015722.475:73224): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015722.475:73225): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015722.577:73226): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015722.577:73227): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015722.578:73228): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299232 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015722.646:73229): pid=299232 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015722.646:73230): pid=299232 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015722.647:73231): pid=299232 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015722.651:73232): pid=299232 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015722.655:73233): pid=299232 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015722.655:73234): pid=299232 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015722.660:73235): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015722.660:73236): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015722.663:73237): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015722.663:73238): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015722.665:73239): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299250 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015722.729:73240): pid=299250 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015722.730:73241): pid=299250 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015722.731:73242): pid=299250 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015722.733:73243): pid=299250 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015723.253:73244): prog-id=2186 op=LOAD
type=SYSCALL msg=audit(1765015723.253:73244): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd5ca29d30 a2=90 a3=9500000000 items=0 ppid=299299 pid=299300 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=68 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015723.253:73244): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F666537313330306638626366366566363761613734633033333663616439
type=BPF msg=audit(1765015723.301:73245): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015723.453:73246): pid=299250 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015723.453:73247): pid=299250 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015723.459:73248): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015723.459:73249): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015723.551:73250): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015723.551:73251): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015723.552:73252): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299320 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015723.613:73253): pid=299320 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015723.614:73254): pid=299320 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015723.615:73255): pid=299320 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015723.619:73256): pid=299320 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015723.622:73257): pid=299320 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015723.622:73258): pid=299320 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015723.626:73259): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015723.626:73260): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015723.629:73261): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015723.629:73262): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015723.631:73263): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299338 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015723.690:73264): pid=299338 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015723.691:73265): pid=299338 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015723.691:73266): pid=299338 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015723.694:73267): pid=299338 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015724.215:73268): prog-id=2187 op=LOAD
type=SYSCALL msg=audit(1765015724.215:73268): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffea4b4f880 a2=90 a3=9500000000 items=0 ppid=299389 pid=299390 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=68 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015724.215:73268): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F376262353262613434353031653639333735656434326631373238663232
type=BPF msg=audit(1765015724.267:73269): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015724.416:73270): pid=299338 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015724.416:73271): pid=299338 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015724.422:73272): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015724.422:73273): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015724.463:73274): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015724.463:73275): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015724.464:73276): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299411 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015724.526:73277): pid=299411 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015724.526:73278): pid=299411 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015724.527:73279): pid=299411 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015724.530:73280): pid=299411 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015724.533:73281): pid=299411 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015724.533:73282): pid=299411 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015724.537:73283): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015724.538:73284): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015724.541:73285): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015724.541:73286): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015724.542:73287): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299429 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015724.602:73288): pid=299429 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015724.602:73289): pid=299429 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015724.603:73290): pid=299429 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015724.606:73291): pid=299429 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015725.155:73292): prog-id=2188 op=LOAD
type=SYSCALL msg=audit(1765015725.155:73292): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe335def80 a2=90 a3=9500000000 items=0 ppid=299480 pid=299481 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=68 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015725.155:73292): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363062333533363365353837353036643462643833303531306664646566
type=BPF msg=audit(1765015725.206:73293): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015725.355:73294): pid=299429 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015725.355:73295): pid=299429 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015725.362:73296): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015725.362:73297): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015728.657:73298): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015728.657:73299): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015728.659:73300): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299501 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015728.724:73301): pid=299501 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015728.725:73302): pid=299501 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015728.726:73303): pid=299501 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015728.729:73304): pid=299501 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015728.732:73305): pid=299501 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015728.732:73306): pid=299501 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015728.738:73307): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015728.738:73308): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015728.749:73309): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015728.749:73310): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015728.751:73311): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299519 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015728.812:73312): pid=299519 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015728.813:73313): pid=299519 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015728.813:73314): pid=299519 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015728.816:73315): pid=299519 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015728.820:73316): pid=299519 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015728.820:73317): pid=299519 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015728.825:73318): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015728.825:73319): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015728.832:73320): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015728.832:73321): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015728.834:73322): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299537 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015728.897:73323): pid=299537 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015728.897:73324): pid=299537 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015728.898:73325): pid=299537 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015728.901:73326): pid=299537 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015728.904:73327): pid=299537 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015728.904:73328): pid=299537 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015728.910:73329): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015728.910:73330): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015728.917:73331): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015728.917:73332): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015728.918:73333): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299555 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015728.973:73334): pid=299555 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015728.973:73335): pid=299555 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015728.974:73336): pid=299555 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015728.978:73337): pid=299555 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015728.980:73338): pid=299555 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015728.981:73339): pid=299555 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015728.987:73340): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015728.987:73341): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015728.989:73342): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015728.990:73343): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015728.991:73344): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299573 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015729.054:73345): pid=299573 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015729.054:73346): pid=299573 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015729.055:73347): pid=299573 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015729.057:73348): pid=299573 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015729.060:73349): pid=299573 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015729.061:73350): pid=299573 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015729.065:73351): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015729.066:73352): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015729.069:73353): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015729.069:73354): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015729.071:73355): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299591 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015729.129:73356): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015729.129:73357): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015729.138:73358): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015729.138:73359): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015729.139:73360): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299607 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015729.192:73361): pid=299607 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015729.192:73362): pid=299607 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015729.193:73363): pid=299607 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015729.196:73364): pid=299607 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015729.200:73365): pid=299607 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015729.200:73366): pid=299607 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015729.205:73367): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015729.205:73368): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015729.208:73369): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015729.208:73370): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015729.210:73371): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299625 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015729.262:73372): pid=299625 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015729.262:73373): pid=299625 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015729.263:73374): pid=299625 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015729.265:73375): pid=299625 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015729.267:73376): pid=299625 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015729.267:73377): pid=299625 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015729.271:73378): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015729.271:73379): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015729.273:73380): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015729.273:73381): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015729.275:73382): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299643 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015729.331:73383): pid=299643 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015729.331:73384): pid=299643 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577202F6574632F636570682F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015729.331:73385): pid=299643 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015729.334:73386): pid=299643 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015729.337:73387): pid=299643 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015729.337:73388): pid=299643 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015729.342:73389): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015729.342:73390): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015729.346:73391): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015729.346:73392): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015729.348:73393): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299661 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015729.402:73394): pid=299661 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015729.402:73395): pid=299661 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015729.403:73396): pid=299661 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015729.405:73397): pid=299661 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015729.407:73398): pid=299661 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015729.408:73399): pid=299661 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015729.412:73400): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015729.412:73401): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015729.415:73402): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015729.415:73403): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015729.416:73404): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299679 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015729.467:73405): pid=299679 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015729.467:73406): pid=299679 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015729.468:73407): pid=299679 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015729.471:73408): pid=299679 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015729.473:73409): pid=299679 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015729.473:73410): pid=299679 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015729.478:73411): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015729.478:73412): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015729.484:73413): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015729.484:73414): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015729.485:73415): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299697 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015729.538:73416): pid=299697 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015729.538:73417): pid=299697 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015729.539:73418): pid=299697 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015729.541:73419): pid=299697 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015729.544:73420): pid=299697 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015729.544:73421): pid=299697 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015729.549:73422): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015729.549:73423): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015729.552:73424): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015729.552:73425): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015729.553:73426): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299715 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015729.614:73427): pid=299715 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015729.614:73428): pid=299715 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015729.615:73429): pid=299715 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015729.618:73430): pid=299715 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015729.621:73431): pid=299715 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015729.622:73432): pid=299715 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015729.626:73433): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015729.626:73434): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015729.629:73435): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015729.629:73436): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015729.630:73437): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299733 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015729.738:73438): pid=299733 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015729.738:73439): pid=299733 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015729.740:73440): pid=299733 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015729.752:73441): pid=299733 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765015729.755:73442): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015729.756:73443): pid=299733 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015729.756:73444): pid=299733 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015729.761:73445): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015729.761:73446): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015729.768:73447): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015729.768:73448): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015729.770:73449): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299757 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015729.844:73450): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015729.845:73451): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015729.847:73452): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015729.847:73453): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015729.849:73454): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299781 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015729.906:73455): pid=299781 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015729.907:73456): pid=299781 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015729.907:73457): pid=299781 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_STOP msg=audit(1765015729.910:73458): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765015729.913:73459): pid=299781 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015729.920:73460): pid=299781 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015729.920:73461): pid=299781 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015729.925:73462): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015729.925:73463): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015729.928:73464): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015729.929:73465): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015729.930:73466): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299803 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015729.988:73467): pid=299803 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015729.988:73468): pid=299803 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015729.989:73469): pid=299803 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015729.992:73470): pid=299803 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015729.994:73471): pid=299803 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015729.995:73472): pid=299803 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015730.001:73473): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015730.001:73474): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015730.011:73475): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015730.011:73476): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015730.012:73477): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299821 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015730.060:73478): pid=299821 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015730.061:73479): pid=299821 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015730.061:73480): pid=299821 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015730.064:73481): pid=299821 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015730.068:73482): pid=299821 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015730.068:73483): pid=299821 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015730.073:73484): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015730.073:73485): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015732.561:73486): pid=299840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299840 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765015732.563:73487): pid=299839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=299840 suid=74 rport=27486 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765015732.564:73488): pid=299839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=299840 suid=74 rport=27486 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1765015732.673:73489): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015732.673:73490): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015732.676:73491): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299841 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015732.737:73492): pid=299841 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015732.737:73493): pid=299841 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015732.738:73494): pid=299841 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015732.740:73495): pid=299841 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015732.743:73496): pid=299841 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015732.744:73497): pid=299841 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015732.748:73498): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015732.748:73499): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015734.112:73500): pid=299839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=299840 suid=74 rport=27486 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765015734.112:73501): pid=299839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299840 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765015734.113:73502): pid=299839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.135.232.92 addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015734.114:73503): pid=299839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299839 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765015734.114:73504): pid=299839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015734.331:73505): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015734.331:73506): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015734.333:73507): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299860 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015734.397:73508): pid=299860 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015734.397:73509): pid=299860 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015734.398:73510): pid=299860 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015734.402:73511): pid=299860 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015734.405:73512): pid=299860 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015734.405:73513): pid=299860 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015734.411:73514): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015734.411:73515): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015734.659:73516): pid=299878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299878 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765015734.660:73517): pid=299859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=299878 suid=74 rport=43092 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765015734.660:73518): pid=299859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=299878 suid=74 rport=43092 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1765015735.478:73519): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015735.482:73520): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015735.486:73521): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015735.696:73522): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015735.704:73523): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015735.783:73524): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015736.376:73525): pid=299859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=299878 suid=74 rport=43092 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765015736.376:73526): pid=299859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299878 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765015736.377:73527): pid=299859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.135.232.92 addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015736.377:73528): pid=299859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299859 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765015736.378:73529): pid=299859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015736.666:73530): pid=299940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299940 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765015736.832:73531): pid=299939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=299940 suid=74 rport=43106 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765015736.832:73532): pid=299939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=299940 suid=74 rport=43106 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765015738.134:73533): pid=299939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=299940 suid=74 rport=43106 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765015738.135:73534): pid=299939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299940 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765015738.135:73535): pid=299939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.135.232.92 addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015738.136:73536): pid=299939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299939 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765015738.136:73537): pid=299939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015738.569:73538): pid=299942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299942 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765015738.570:73539): pid=299941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=299942 suid=74 rport=43114 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765015738.570:73540): pid=299941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=299942 suid=74 rport=43114 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765015740.556:73541): pid=299941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=299942 suid=74 rport=43114 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765015740.556:73542): pid=299941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299942 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765015740.557:73543): pid=299941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.135.232.92 addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015740.557:73544): pid=299941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299941 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765015740.557:73545): pid=299941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015741.060:73546): pid=299944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299944 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765015741.061:73547): pid=299943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=299944 suid=74 rport=43118 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765015741.061:73548): pid=299943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=299944 suid=74 rport=43118 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765015741.539:73549): pid=299946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299946 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765015741.540:73550): pid=299945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=299946 suid=74 rport=46396 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765015741.540:73551): pid=299945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=299946 suid=74 rport=46396 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765015741.629:73552): pid=299945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015741.630:73553): pid=299945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:e0:39:03:0c:58:11:ed:73:22:37:9b:fb:b5:96:ae:e6:c9:d5:b4:79:86:de:e9:6d:a3:5f:2e:d5:1c:00:d2:eb exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015741.633:73554): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765015741.659:73555): pid=299945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015741.659:73556): pid=299945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=299946 suid=74 rport=46396 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765015741.661:73557): pid=299945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765015741.662:73558): pid=299945 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1003 tty=(none) old-ses=4294967295 ses=69 res=1UID="root" OLD-AUID="unset" AUID="tripleo-admin"
type=SYSCALL msg=audit(1765015741.662:73558): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff9b3f1e00 a2=4 a3=3eb items=0 ppid=182854 pid=299945 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=69 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015741.662:73558): proctitle=737368643A20747269706C656F2D61646D696E205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765015741.663:73559): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765015741.719:73560): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1003 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015741.750:73561): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765015741.764:73562): pid=299965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1765015741.764:73563): pid=299965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="tripleo-admin" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1765015741.765:73564): pid=299965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765015741.765:73565): pid=299965 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1003 tty=(none) old-ses=4294967295 ses=70 res=1UID="root" OLD-AUID="unset" AUID="tripleo-admin"
type=SYSCALL msg=audit(1765015741.765:73565): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7fff23b351c0 a2=4 a3=3eb items=0 ppid=1 pid=299965 auid=1003 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=70 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015741.765:73565): proctitle="(systemd)"
type=USER_START msg=audit(1765015741.769:73566): pid=299965 uid=0 auid=1003 ses=70 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="tripleo-admin" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765015741.901:73567): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1003 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765015741.924:73568): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015741.926:73569): pid=299981 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299981 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="root"
type=CRED_ACQ msg=audit(1765015741.927:73570): pid=299981 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015741.970:73571): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015741.971:73572): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015741.972:73573): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299982 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015742.005:73574): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015742.005:73575): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015742.023:73576): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015742.023:73577): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015742.024:73578): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299998 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015742.065:73579): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015742.065:73580): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015742.095:73581): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015742.095:73582): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015742.096:73583): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300020 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015742.126:73584): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015742.126:73585): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015742.154:73586): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015742.154:73587): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015742.155:73588): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300038 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015742.241:73589): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015742.241:73590): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015742.259:73591): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015742.259:73592): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015742.260:73593): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300055 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015742.335:73594): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015742.335:73595): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015742.352:73596): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015742.352:73597): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015742.353:73598): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300071 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015742.386:73599): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015742.386:73600): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015742.404:73601): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015742.404:73602): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015742.406:73603): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300088 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015742.476:73604): pid=300106 uid=1003 auid=1003 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015742.476:73605): pid=300106 uid=1003 auid=1003 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72707172616F656C73786361666179716A696E6571776E667477646368747077203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353734322E3030373735312D36313734332D35303237333330313632303538342F416E736962616C6C5A5F6C696E65696E66696C652E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015742.477:73606): pid=300106 uid=1003 auid=1003 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015742.481:73607): pid=300106 uid=1003 auid=1003 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015742.660:73608): pid=300106 uid=1003 auid=1003 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015742.660:73609): pid=300106 uid=1003 auid=1003 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015742.666:73610): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015742.666:73611): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015742.681:73612): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015742.683:73613): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015742.684:73614): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300111 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015742.719:73615): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015742.719:73616): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015742.803:73617): pid=299943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=299944 suid=74 rport=43118 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765015742.803:73618): pid=299943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299944 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765015742.803:73619): pid=299943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=45.135.232.92 addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015742.803:73620): pid=299943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299943 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765015742.803:73621): pid=299943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.135.232.92 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015742.832:73622): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015742.832:73623): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015742.834:73624): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300128 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015742.867:73625): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015742.868:73626): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015742.884:73627): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015742.884:73628): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015742.886:73629): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300144 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015742.927:73630): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015742.927:73631): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015742.949:73632): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015742.949:73633): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015742.950:73634): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300166 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015742.984:73635): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015742.984:73636): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015742.997:73637): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015742.997:73638): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015742.998:73639): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300184 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015743.087:73640): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015743.087:73641): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015743.114:73642): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015743.114:73643): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015743.117:73644): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300201 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015743.163:73645): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015743.163:73646): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015743.176:73647): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015743.176:73648): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015743.177:73649): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300217 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015743.210:73650): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015743.210:73651): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015743.223:73652): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015743.223:73653): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015743.226:73654): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300234 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015743.289:73655): pid=300252 uid=1003 auid=1003 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015743.289:73656): pid=300252 uid=1003 auid=1003 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7875737965707268757A6D79717A6975646F71736764737667677473736D716C203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353734322E383730333930322D36313735392D3136313835373532333336313636352F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015743.290:73657): pid=300252 uid=1003 auid=1003 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015743.292:73658): pid=300252 uid=1003 auid=1003 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015743.480:73659): pid=300252 uid=1003 auid=1003 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015743.480:73660): pid=300252 uid=1003 auid=1003 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015743.484:73661): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015743.484:73662): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015743.507:73663): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015743.508:73664): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015743.509:73665): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300256 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015743.539:73666): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015743.540:73667): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015743.625:73668): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015743.625:73669): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015743.626:73670): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300273 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015743.648:73671): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015743.648:73672): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015743.672:73673): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015743.672:73674): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015743.710:73675): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300289 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015743.738:73676): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015743.738:73677): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015743.764:73678): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015743.764:73679): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015743.765:73680): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300311 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015743.789:73681): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015743.789:73682): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015743.813:73683): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015743.813:73684): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015743.814:73685): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300329 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015743.896:73686): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015743.896:73687): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015743.929:73688): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015743.929:73689): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015743.930:73690): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300346 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015743.976:73691): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015743.976:73692): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015743.995:73693): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015743.995:73694): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015743.996:73695): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300362 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015744.027:73696): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015744.027:73697): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015744.047:73698): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015744.048:73699): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015744.049:73700): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300379 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_ACCT msg=audit(1765015744.108:73701): pid=300397 uid=1003 auid=1003 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765015744.109:73702): pid=300397 uid=1003 auid=1003 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68646770786F7A6366787162737379676568736A777A6565646973666F78646B203B202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353031353734332E3635323530362D36313737302D3137303039303538353533383130382F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765015744.109:73703): pid=300397 uid=1003 auid=1003 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765015744.123:73704): pid=300397 uid=1003 auid=1003 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765015744.125:73705): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015744.253:73706): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015746.321:73707): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015746.321:73708): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015746.322:73709): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300425 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015746.380:73710): pid=300425 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015746.380:73711): pid=300425 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015746.381:73712): pid=300425 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015746.385:73713): pid=300425 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015746.388:73714): pid=300397 uid=1003 auid=1003 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765015746.388:73715): pid=300425 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015746.388:73716): pid=300397 uid=1003 auid=1003 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015746.389:73717): pid=300425 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015746.392:73718): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015746.392:73719): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_END msg=audit(1765015746.392:73720): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015746.392:73721): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765015746.393:73722): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015746.394:73723): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015746.395:73724): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300443 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_LOGIN msg=audit(1765015746.408:73725): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765015746.409:73726): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015746.410:73727): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300451 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015746.446:73728): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765015746.446:73729): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1003 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765015746.457:73730): pid=300443 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015746.457:73731): pid=300443 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015746.458:73732): pid=300443 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015746.461:73733): pid=300443 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015746.952:73734): prog-id=2189 op=LOAD
type=SYSCALL msg=audit(1765015746.952:73734): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff4b1654c0 a2=90 a3=9500000000 items=0 ppid=300512 pid=300513 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=68 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015746.952:73734): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F643733336239333566323038353539646266373561646432613730623265
type=BPF msg=audit(1765015747.005:73735): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765015747.044:73736): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015747.136:73737): pid=300443 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015747.136:73738): pid=300443 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015747.142:73739): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015747.142:73740): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_STOP msg=audit(1765015747.214:73741): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015747.381:73742): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015747.381:73743): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015747.384:73744): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300558 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015747.452:73745): pid=300558 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015747.453:73746): pid=300558 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015747.455:73747): pid=300558 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015747.461:73748): pid=300558 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015747.465:73749): pid=300558 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015747.465:73750): pid=300558 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015747.468:73751): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015747.468:73752): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015747.763:73753): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015747.763:73754): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015747.764:73755): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300576 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015747.814:73756): pid=300576 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015747.814:73757): pid=300576 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015747.815:73758): pid=300576 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015747.816:73759): pid=300576 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015747.819:73760): pid=300576 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015747.819:73761): pid=300576 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015747.823:73762): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015747.824:73763): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015753.360:73764): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015753.360:73765): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015753.361:73766): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300594 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015753.428:73767): pid=300594 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015753.428:73768): pid=300594 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015753.429:73769): pid=300594 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015753.433:73770): pid=300594 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015753.435:73771): pid=300594 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015753.436:73772): pid=300594 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015753.439:73773): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015753.439:73774): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015753.444:73775): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015753.444:73776): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015753.445:73777): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300624 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_START msg=audit(1765015753.445:73778): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015753.447:73779): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300625 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=BPF msg=audit(1765015753.495:73780): prog-id=0 op=UNLOAD
type=USER_ACCT msg=audit(1765015753.516:73781): pid=300624 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015753.516:73782): pid=300624 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015753.517:73783): pid=300624 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015753.520:73784): pid=300624 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_ACCT msg=audit(1765015753.520:73785): pid=300625 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015753.521:73786): pid=300625 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015753.521:73787): pid=300625 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015753.523:73788): pid=300624 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015753.524:73789): pid=300624 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015753.524:73790): pid=300625 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015753.528:73791): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015753.530:73792): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015753.531:73793): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300668 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015753.595:73794): pid=300668 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015753.595:73795): pid=300668 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015753.596:73796): pid=300668 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015753.599:73797): pid=300668 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015753.602:73798): pid=300668 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015753.602:73799): pid=300668 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015753.607:73800): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015753.609:73801): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015753.610:73802): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300693 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015753.660:73803): pid=300693 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015753.660:73804): pid=300693 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015753.662:73805): pid=300693 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015753.665:73806): pid=300693 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015753.667:73807): pid=300693 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015753.668:73808): pid=300693 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015753.672:73809): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015753.674:73810): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015753.675:73811): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300711 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015753.731:73812): pid=300711 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015753.731:73813): pid=300711 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015753.732:73814): pid=300711 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015753.735:73815): pid=300711 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015753.738:73816): pid=300711 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015753.738:73817): pid=300711 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015753.743:73818): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015753.746:73819): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015753.747:73820): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300729 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015753.800:73821): pid=300729 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015753.800:73822): pid=300729 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015753.802:73823): pid=300729 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015753.806:73824): pid=300729 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015753.809:73825): pid=300729 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015753.809:73826): pid=300729 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015753.814:73827): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015753.820:73828): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015753.821:73829): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300769 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015753.875:73830): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015753.878:73831): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015753.879:73832): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300795 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015753.929:73833): pid=300795 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015753.929:73834): pid=300795 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015753.937:73835): pid=300795 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015753.939:73836): pid=300795 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015753.944:73837): pid=300795 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015753.944:73838): pid=300795 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015753.948:73839): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015753.951:73840): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015753.952:73841): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300818 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015754.016:73842): pid=300818 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015754.017:73843): pid=300818 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015754.019:73844): pid=300818 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015754.023:73845): pid=300818 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015754.026:73846): pid=300818 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015754.026:73847): pid=300818 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015754.031:73848): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015754.035:73849): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015754.039:73850): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300859 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015754.094:73851): pid=300859 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015754.094:73852): pid=300859 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577202F6574632F636570682F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015754.095:73853): pid=300859 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015754.097:73854): pid=300859 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015754.099:73855): pid=300859 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015754.100:73856): pid=300859 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015754.104:73857): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015754.110:73858): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015754.111:73859): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300885 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015754.164:73860): pid=300885 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015754.164:73861): pid=300885 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015754.165:73862): pid=300885 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015754.168:73863): pid=300885 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015754.171:73864): pid=300885 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015754.171:73865): pid=300885 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015754.176:73866): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015754.185:73867): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015754.186:73868): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300904 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015754.237:73869): pid=300904 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015754.237:73870): pid=300904 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015754.239:73871): pid=300904 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015754.241:73872): pid=300904 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015754.244:73873): pid=300904 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015754.245:73874): pid=300904 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015754.249:73875): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015754.256:73876): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015754.257:73877): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300928 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015754.318:73878): pid=300928 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015754.318:73879): pid=300928 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015754.319:73880): pid=300928 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015754.321:73881): pid=300928 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015754.325:73882): pid=300928 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015754.325:73883): pid=300928 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015754.331:73884): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015754.336:73885): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015754.337:73886): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300953 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015754.393:73887): pid=300953 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015754.394:73888): pid=300953 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015754.394:73889): pid=300953 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015754.397:73890): pid=300953 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015754.400:73891): pid=300953 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015754.400:73892): pid=300953 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015754.404:73893): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015754.411:73894): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015754.412:73895): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300971 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=SERVICE_STOP msg=audit(1765015754.464:73896): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ceph-1939e851-b10c-5c3b-9bb7-8e7f380233e8@mon.np0005548790 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765015754.480:73897): pid=300971 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015754.480:73898): pid=300971 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015754.481:73899): pid=300971 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015754.484:73900): pid=300971 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015754.487:73901): pid=300971 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015754.487:73902): pid=300971 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015754.492:73903): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015754.495:73904): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015754.497:73905): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=300994 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015754.554:73906): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015754.558:73907): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015754.561:73908): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=301010 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015754.637:73909): pid=301010 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015754.638:73910): pid=301010 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015754.639:73911): pid=301010 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015754.796:73912): prog-id=2190 op=LOAD
type=BPF msg=audit(1765015754.796:73913): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015754.800:73914): prog-id=2191 op=LOAD
type=BPF msg=audit(1765015754.800:73915): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015754.804:73916): prog-id=2192 op=LOAD
type=BPF msg=audit(1765015754.804:73917): prog-id=2193 op=LOAD
type=BPF msg=audit(1765015754.804:73918): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015754.804:73919): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015754.805:73920): prog-id=2194 op=LOAD
type=BPF msg=audit(1765015754.805:73921): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015754.806:73922): prog-id=2195 op=LOAD
type=BPF msg=audit(1765015754.806:73923): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015754.806:73924): prog-id=2196 op=LOAD
type=BPF msg=audit(1765015754.806:73925): prog-id=2197 op=LOAD
type=BPF msg=audit(1765015754.806:73926): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015754.806:73927): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015754.807:73928): prog-id=2198 op=LOAD
type=BPF msg=audit(1765015754.807:73929): prog-id=2199 op=LOAD
type=BPF msg=audit(1765015754.807:73930): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015754.807:73931): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015754.808:73932): prog-id=2200 op=LOAD
type=BPF msg=audit(1765015754.808:73933): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015754.808:73934): prog-id=2201 op=LOAD
type=BPF msg=audit(1765015754.808:73935): prog-id=2202 op=LOAD
type=BPF msg=audit(1765015754.808:73936): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015754.808:73937): prog-id=0 op=UNLOAD
type=USER_START msg=audit(1765015754.827:73938): pid=301010 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015754.833:73939): pid=301010 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015754.834:73940): pid=301010 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015754.840:73941): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015754.843:73942): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015754.844:73943): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=301062 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015754.852:73944): pid=300625 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015754.852:73945): pid=300625 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015754.857:73946): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765015754.910:73947): pid=301062 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015754.910:73948): pid=301062 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015754.911:73949): pid=301062 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015754.913:73950): pid=301062 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015754.916:73951): pid=301062 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015754.916:73952): pid=301062 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015754.921:73953): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015754.921:73954): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015754.925:73955): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015754.925:73956): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015754.927:73957): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=301080 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015754.985:73958): pid=301080 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015754.985:73959): pid=301080 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015754.986:73960): pid=301080 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015754.988:73961): pid=301080 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015754.992:73962): pid=301080 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015754.992:73963): pid=301080 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015754.996:73964): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015754.996:73965): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015755.207:73966): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015755.207:73967): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015755.208:73968): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=301098 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015755.259:73969): pid=301098 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015755.259:73970): pid=301098 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015755.260:73971): pid=301098 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015755.262:73972): pid=301098 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015755.264:73973): pid=301098 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015755.265:73974): pid=301098 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015755.269:73975): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015755.269:73976): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015760.472:73977): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015760.583:73978): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015764.841:73979): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015764.841:73980): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015764.842:73981): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=301133 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015764.903:73982): pid=301133 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015764.903:73983): pid=301133 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015764.904:73984): pid=301133 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015764.908:73985): pid=301133 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015764.910:73986): pid=301133 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015764.911:73987): pid=301133 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015764.915:73988): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015764.915:73989): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015764.918:73990): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015764.918:73991): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015764.919:73992): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=301151 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015764.983:73993): pid=301151 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015764.984:73994): pid=301151 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015764.984:73995): pid=301151 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015764.987:73996): pid=301151 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015765.509:73997): prog-id=2203 op=LOAD
type=SYSCALL msg=audit(1765015765.509:73997): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc16c29de0 a2=90 a3=9500000000 items=0 ppid=301201 pid=301202 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=68 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015765.509:73997): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F633137663962353135376161616334636337373233316632626564613166
type=BPF msg=audit(1765015765.555:73998): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015765.677:73999): pid=301151 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015765.678:74000): pid=301151 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015765.683:74001): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015765.683:74002): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015765.727:74003): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015765.727:74004): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015765.729:74005): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=301222 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015765.780:74006): pid=301222 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015765.781:74007): pid=301222 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015765.781:74008): pid=301222 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015765.806:74009): pid=301222 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765015765.808:74010): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015765.809:74011): pid=301222 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015765.809:74012): pid=301222 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765015765.812:74013): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015765.813:74014): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015765.813:74015): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015765.816:74016): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015765.816:74017): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015765.816:74018): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015765.817:74019): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=301243 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015765.880:74020): pid=301243 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015765.881:74021): pid=301243 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015765.881:74022): pid=301243 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015765.884:74023): pid=301243 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_STOP msg=audit(1765015765.949:74024): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015766.047:74025): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015766.100:74026): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765015766.387:74027): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015766.390:74028): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=301347 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=BPF msg=audit(1765015766.440:74029): prog-id=2204 op=LOAD
type=SYSCALL msg=audit(1765015766.440:74029): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc91d17c00 a2=90 a3=9500000000 items=0 ppid=301364 pid=301365 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=68 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015766.440:74029): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F303131656535653034316665343733363431386532646535376234343838
type=USER_ACCT msg=audit(1765015766.457:74030): pid=301347 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015766.458:74031): pid=301347 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015766.459:74032): pid=301347 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015766.468:74033): pid=301347 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015766.470:74034): pid=301347 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015766.470:74035): pid=301347 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015766.474:74036): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015766.476:74037): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015766.477:74038): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=301377 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=BPF msg=audit(1765015766.484:74039): prog-id=0 op=UNLOAD
type=USER_ACCT msg=audit(1765015766.534:74040): pid=301377 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015766.534:74041): pid=301377 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015766.535:74042): pid=301377 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015766.537:74043): pid=301377 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015766.718:74044): pid=301243 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015766.718:74045): pid=301243 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015766.724:74046): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015766.771:74047): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015766.772:74048): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=301412 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015766.825:74049): pid=301412 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015766.825:74050): pid=301412 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015766.826:74051): pid=301412 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015766.828:74052): pid=301412 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015766.830:74053): pid=301412 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015766.831:74054): pid=301412 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015766.835:74055): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015766.839:74056): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015766.840:74057): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=301439 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015766.891:74058): pid=301439 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015766.891:74059): pid=301439 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015766.892:74060): pid=301439 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015766.893:74061): pid=301439 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015767.151:74062): prog-id=2205 op=LOAD
type=SYSCALL msg=audit(1765015767.151:74062): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffc694d680 a2=90 a3=9500000000 items=0 ppid=301508 pid=301509 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=68 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015767.151:74062): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F356361373664363931663036643661643936346636323739343435353737
type=BPF msg=audit(1765015767.195:74063): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015767.423:74064): prog-id=2206 op=LOAD
type=SYSCALL msg=audit(1765015767.423:74064): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc843842b0 a2=90 a3=9500000000 items=0 ppid=301558 pid=301559 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=68 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015767.423:74064): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F663031623165653463323833326364356165663763306364386438376539
type=BPF msg=audit(1765015767.619:74065): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015768.064:74066): prog-id=2207 op=LOAD
type=BPF msg=audit(1765015768.064:74067): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015768.068:74068): prog-id=2208 op=LOAD
type=BPF msg=audit(1765015768.068:74069): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015768.071:74070): prog-id=2209 op=LOAD
type=BPF msg=audit(1765015768.071:74071): prog-id=2210 op=LOAD
type=BPF msg=audit(1765015768.071:74072): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015768.072:74073): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015768.072:74074): prog-id=2211 op=LOAD
type=BPF msg=audit(1765015768.072:74075): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015768.073:74076): prog-id=2212 op=LOAD
type=BPF msg=audit(1765015768.073:74077): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015768.073:74078): prog-id=2213 op=LOAD
type=BPF msg=audit(1765015768.073:74079): prog-id=2214 op=LOAD
type=BPF msg=audit(1765015768.073:74080): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015768.073:74081): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015768.074:74082): prog-id=2215 op=LOAD
type=BPF msg=audit(1765015768.075:74083): prog-id=2216 op=LOAD
type=BPF msg=audit(1765015768.075:74084): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015768.075:74085): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015768.076:74086): prog-id=2217 op=LOAD
type=BPF msg=audit(1765015768.076:74087): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015768.076:74088): prog-id=2218 op=LOAD
type=BPF msg=audit(1765015768.076:74089): prog-id=2219 op=LOAD
type=BPF msg=audit(1765015768.076:74090): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015768.076:74091): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015768.419:74092): prog-id=2220 op=LOAD
type=BPF msg=audit(1765015768.419:74093): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015768.423:74094): prog-id=2221 op=LOAD
type=BPF msg=audit(1765015768.423:74095): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015768.426:74096): prog-id=2222 op=LOAD
type=BPF msg=audit(1765015768.427:74097): prog-id=2223 op=LOAD
type=BPF msg=audit(1765015768.427:74098): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015768.427:74099): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015768.427:74100): prog-id=2224 op=LOAD
type=BPF msg=audit(1765015768.427:74101): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015768.428:74102): prog-id=2225 op=LOAD
type=BPF msg=audit(1765015768.428:74103): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015768.428:74104): prog-id=2226 op=LOAD
type=BPF msg=audit(1765015768.428:74105): prog-id=2227 op=LOAD
type=BPF msg=audit(1765015768.428:74106): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015768.428:74107): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015768.430:74108): prog-id=2228 op=LOAD
type=BPF msg=audit(1765015768.430:74109): prog-id=2229 op=LOAD
type=BPF msg=audit(1765015768.430:74110): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015768.430:74111): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015768.431:74112): prog-id=2230 op=LOAD
type=BPF msg=audit(1765015768.431:74113): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015768.431:74114): prog-id=2231 op=LOAD
type=BPF msg=audit(1765015768.431:74115): prog-id=2232 op=LOAD
type=BPF msg=audit(1765015768.431:74116): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015768.431:74117): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765015768.834:74118): prog-id=2233 op=LOAD
type=SYSCALL msg=audit(1765015768.834:74118): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffffb76d420 a2=90 a3=9500000001 items=0 ppid=301738 pid=301739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015768.834:74118): proctitle=2F7573722F62696E2F6372756E002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F6434316462313938623564653638626162303263356462636361306438666564303231356639396161663539343439
type=SERVICE_START msg=audit(1765015768.896:74119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ceph-1939e851-b10c-5c3b-9bb7-8e7f380233e8@mon.np0005548790 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015768.927:74120): pid=301377 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015768.927:74121): pid=301377 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015768.935:74122): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=BPF msg=audit(1765015769.112:74123): prog-id=2234 op=LOAD
type=SYSCALL msg=audit(1765015769.112:74123): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe3a784dc0 a2=90 a3=9500000000 items=0 ppid=301798 pid=301799 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=68 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015769.112:74123): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F316330326136373531343538323862373264633532646663656235306665
type=BPF msg=audit(1765015769.182:74124): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015769.435:74125): pid=301439 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015769.435:74126): pid=301439 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015769.441:74127): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015769.441:74128): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015769.495:74129): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015769.495:74130): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015769.496:74131): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=301828 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015769.552:74132): pid=301828 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015769.552:74133): pid=301828 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015769.553:74134): pid=301828 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015769.557:74135): pid=301828 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015769.559:74136): pid=301828 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015769.559:74137): pid=301828 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015769.564:74138): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015769.564:74139): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015769.567:74140): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015769.567:74141): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015769.569:74142): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=301846 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015769.626:74143): pid=301846 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015769.626:74144): pid=301846 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935205F6F726368206465706C6F79202D2D667369642031393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015769.627:74145): pid=301846 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015769.629:74146): pid=301846 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015770.199:74147): prog-id=2235 op=LOAD
type=SYSCALL msg=audit(1765015770.199:74147): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe2255bbd0 a2=90 a3=9500000000 items=0 ppid=301895 pid=301896 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=68 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015770.199:74147): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F643238663936333766643562326533393163353562336630613833656266
type=BPF msg=audit(1765015770.248:74148): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015770.365:74149): pid=301846 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015770.365:74150): pid=301846 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015770.369:74151): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015770.369:74152): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015772.472:74153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015772.653:74154): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015774.477:74155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015774.575:74156): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015774.575:74157): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015774.578:74158): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=301971 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=SERVICE_STOP msg=audit(1765015774.588:74159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765015774.631:74160): pid=301971 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015774.633:74161): pid=301971 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015774.634:74162): pid=301971 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015774.640:74163): pid=301971 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015774.642:74164): pid=301971 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015774.643:74165): pid=301971 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015774.647:74166): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015774.647:74167): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015774.650:74168): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015774.650:74169): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015774.652:74170): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=301989 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015774.702:74171): pid=301989 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015774.702:74172): pid=301989 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935205F6F726368206465706C6F79202D2D667369642031393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015774.703:74173): pid=301989 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015774.705:74174): pid=301989 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015775.291:74175): prog-id=2236 op=LOAD
type=SYSCALL msg=audit(1765015775.291:74175): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc7c38e0b0 a2=90 a3=9500000000 items=0 ppid=302049 pid=302050 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=68 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015775.291:74175): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F386435366636396663613862316464383364353337383731643230346236
type=BPF msg=audit(1765015775.344:74176): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015775.494:74177): pid=301989 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015775.494:74178): pid=301989 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015775.500:74179): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015775.500:74180): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015775.557:74181): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015775.557:74182): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015775.558:74183): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=302090 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015775.623:74184): pid=302090 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015775.623:74185): pid=302090 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015775.624:74186): pid=302090 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015775.627:74187): pid=302090 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015775.629:74188): pid=302090 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015775.630:74189): pid=302090 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015775.634:74190): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015775.634:74191): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015775.644:74192): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015775.644:74193): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015775.646:74194): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=302108 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015775.705:74195): pid=302108 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015775.706:74196): pid=302108 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015775.706:74197): pid=302108 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015775.709:74198): pid=302108 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765015777.306:74199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015777.524:74200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015777.527:74201): pid=302108 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015777.527:74202): pid=302108 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015777.541:74203): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015777.541:74204): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015777.577:74205): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015777.577:74206): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015777.579:74207): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=302345 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015777.647:74208): pid=302345 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015777.648:74209): pid=302345 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015777.649:74210): pid=302345 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015777.654:74211): pid=302345 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015777.657:74212): pid=302345 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015777.658:74213): pid=302345 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015777.663:74214): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015777.663:74215): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015777.667:74216): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015777.667:74217): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015777.669:74218): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=302363 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015777.733:74219): pid=302363 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015777.734:74220): pid=302363 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015777.734:74221): pid=302363 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015777.738:74222): pid=302363 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015778.391:74223): pid=302363 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015778.392:74224): pid=302363 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015778.455:74225): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015778.455:74226): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015778.469:74227): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015778.469:74228): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015778.471:74229): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=302413 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015778.536:74230): pid=302413 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015778.537:74231): pid=302413 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015778.537:74232): pid=302413 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015778.542:74233): pid=302413 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015778.545:74234): pid=302413 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015778.545:74235): pid=302413 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015778.548:74236): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015778.548:74237): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015778.551:74238): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015778.551:74239): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015778.553:74240): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=302431 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015778.615:74241): pid=302431 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015778.615:74242): pid=302431 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015778.616:74243): pid=302431 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015778.619:74244): pid=302431 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015778.622:74245): pid=302431 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015778.623:74246): pid=302431 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015778.626:74247): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015778.627:74248): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015778.628:74249): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015778.629:74250): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015778.630:74251): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=302449 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015778.695:74252): pid=302449 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015778.695:74253): pid=302449 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015778.696:74254): pid=302449 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015778.699:74255): pid=302449 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015778.703:74256): pid=302449 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015778.703:74257): pid=302449 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015778.708:74258): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015778.708:74259): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015778.714:74260): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015778.714:74261): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015778.715:74262): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=302467 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015778.778:74263): pid=302467 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015778.779:74264): pid=302467 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015778.779:74265): pid=302467 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015778.782:74266): pid=302467 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015778.786:74267): pid=302467 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015778.786:74268): pid=302467 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015778.795:74269): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015778.795:74270): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015778.803:74271): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015778.803:74272): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015778.805:74273): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=302485 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015778.869:74274): pid=302485 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015778.870:74275): pid=302485 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015778.870:74276): pid=302485 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015778.873:74277): pid=302485 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015778.876:74278): pid=302485 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015778.876:74279): pid=302485 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015778.880:74280): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015778.881:74281): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015778.883:74282): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015778.883:74283): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015778.884:74284): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=302503 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015778.932:74285): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015778.933:74286): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015778.935:74287): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015778.935:74288): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015778.981:74289): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=302519 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015779.043:74290): pid=302519 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015779.043:74291): pid=302519 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015779.044:74292): pid=302519 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015779.047:74293): pid=302519 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015779.053:74294): pid=302519 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015779.053:74295): pid=302519 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015779.057:74296): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015779.058:74297): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015779.061:74298): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015779.061:74299): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015779.063:74300): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=302537 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015779.128:74301): pid=302537 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015779.128:74302): pid=302537 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015779.129:74303): pid=302537 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015779.132:74304): pid=302537 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015779.135:74305): pid=302537 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015779.135:74306): pid=302537 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015779.140:74307): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015779.140:74308): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015779.146:74309): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015779.146:74310): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015779.148:74311): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=302555 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015779.217:74312): pid=302555 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015779.217:74313): pid=302555 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577202F6574632F636570682F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015779.218:74314): pid=302555 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015779.221:74315): pid=302555 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015779.224:74316): pid=302555 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015779.225:74317): pid=302555 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015779.229:74318): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015779.229:74319): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015779.233:74320): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015779.233:74321): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015779.235:74322): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=302573 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015779.301:74323): pid=302573 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015779.302:74324): pid=302573 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015779.303:74325): pid=302573 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015779.305:74326): pid=302573 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015779.309:74327): pid=302573 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015779.309:74328): pid=302573 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015779.313:74329): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015779.313:74330): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015779.315:74331): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015779.316:74332): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015779.317:74333): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=302591 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015779.374:74334): pid=302591 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015779.375:74335): pid=302591 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015779.376:74336): pid=302591 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015779.379:74337): pid=302591 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015779.381:74338): pid=302591 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015779.382:74339): pid=302591 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015779.387:74340): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015779.387:74341): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015779.390:74342): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015779.390:74343): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015779.392:74344): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=302609 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015779.452:74345): pid=302609 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015779.453:74346): pid=302609 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015779.453:74347): pid=302609 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015779.456:74348): pid=302609 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015779.459:74349): pid=302609 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015779.459:74350): pid=302609 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015779.464:74351): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015779.464:74352): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015779.467:74353): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015779.467:74354): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015779.469:74355): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=302627 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015779.534:74356): pid=302627 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015779.535:74357): pid=302627 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015779.535:74358): pid=302627 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015779.538:74359): pid=302627 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015779.541:74360): pid=302627 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015779.542:74361): pid=302627 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015779.546:74362): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015779.546:74363): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015779.549:74364): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015779.549:74365): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015779.550:74366): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=302645 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015779.611:74367): pid=302645 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015779.611:74368): pid=302645 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015779.613:74369): pid=302645 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015779.615:74370): pid=302645 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015779.618:74371): pid=302645 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015779.619:74372): pid=302645 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015779.623:74373): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015779.624:74374): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015779.627:74375): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015779.627:74376): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015779.629:74377): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=302663 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015779.681:74378): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015779.681:74379): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015779.684:74380): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015779.684:74381): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015779.686:74382): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=302679 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015779.748:74383): pid=302679 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015779.748:74384): pid=302679 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015779.749:74385): pid=302679 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015779.752:74386): pid=302679 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015779.757:74387): pid=302679 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015779.758:74388): pid=302679 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015779.762:74389): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015779.762:74390): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015779.765:74391): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015779.765:74392): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015779.766:74393): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=302697 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015779.829:74394): pid=302697 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015779.829:74395): pid=302697 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015779.830:74396): pid=302697 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015779.833:74397): pid=302697 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015779.836:74398): pid=302697 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015779.836:74399): pid=302697 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015779.840:74400): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015779.841:74401): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015779.843:74402): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015779.844:74403): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015779.845:74404): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=302715 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015779.903:74405): pid=302715 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015779.904:74406): pid=302715 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015779.904:74407): pid=302715 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015779.907:74408): pid=302715 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015779.910:74409): pid=302715 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015779.910:74410): pid=302715 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015779.915:74411): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015779.915:74412): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015780.118:74413): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015780.118:74414): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015780.120:74415): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=302733 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015780.178:74416): pid=302733 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015780.179:74417): pid=302733 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015780.179:74418): pid=302733 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015780.182:74419): pid=302733 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015780.185:74420): pid=302733 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015780.185:74421): pid=302733 uid=1002 auid=1002 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015780.189:74422): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015780.190:74423): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015789.508:74424): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=297761 suid=1002 rport=34020 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.107 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015789.511:74425): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297761 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015789.515:74426): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.107 addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015789.515:74427): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.107 addr=192.168.122.107 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015789.516:74428): pid=297758 uid=0 auid=1002 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=297758 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1765015789.791:74429): pid=302753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=302753 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765015789.793:74430): pid=302752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=302753 suid=74 rport=48272 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765015789.793:74431): pid=302752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=302753 suid=74 rport=48272 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765015789.834:74432): pid=302752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="ceph-admin" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015789.834:74433): pid=302752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:1d:06:01:4f:c9:f7:1d:b9:e2:70:3b:4f:f6:d7:a1:77:7f:a0:25:73:05:b6:4c:3e:7d:33:25:99:1d:b0:0a:c1 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765015789.861:74434): pid=302752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015789.861:74435): pid=302752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=302753 suid=74 rport=48272 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765015789.864:74436): pid=302752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765015789.864:74437): pid=302752 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1002 tty=(none) old-ses=4294967295 ses=71 res=1UID="root" OLD-AUID="unset" AUID="ceph-admin"
type=SYSCALL msg=audit(1765015789.864:74437): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff38a0eff0 a2=4 a3=3ea items=0 ppid=182854 pid=302752 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=71 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015789.864:74437): proctitle=737368643A20636570682D61646D696E205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765015789.865:74438): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_START msg=audit(1765015789.896:74439): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015789.897:74440): pid=302755 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=302755 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="root"
type=CRED_ACQ msg=audit(1765015789.898:74441): pid=302755 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_LOGIN msg=audit(1765015789.943:74442): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015789.943:74443): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015789.945:74444): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=302756 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015790.008:74445): pid=302756 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015790.009:74446): pid=302756 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015790.010:74447): pid=302756 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015790.014:74448): pid=302756 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015790.016:74449): pid=302756 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015790.017:74450): pid=302756 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015790.021:74451): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015790.021:74452): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015790.024:74453): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015790.024:74454): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015790.026:74455): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=302774 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015790.088:74456): pid=302774 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015790.088:74457): pid=302774 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015790.088:74458): pid=302774 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015790.090:74459): pid=302774 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765015790.684:74460): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015790.885:74461): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015791.830:74462): pid=302774 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015791.830:74463): pid=302774 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015791.835:74464): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015791.835:74465): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015791.873:74466): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015791.873:74467): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015791.875:74468): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303002 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015791.934:74469): pid=303002 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015791.934:74470): pid=303002 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015791.934:74471): pid=303002 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015791.938:74472): pid=303002 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015791.940:74473): pid=303002 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015791.940:74474): pid=303002 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015791.944:74475): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015791.944:74476): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015791.947:74477): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015791.947:74478): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015791.949:74479): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303020 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015792.007:74480): pid=303020 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015792.007:74481): pid=303020 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015792.008:74482): pid=303020 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015792.011:74483): pid=303020 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015792.636:74484): pid=303020 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015792.636:74485): pid=303020 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015792.674:74486): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015792.674:74487): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015792.755:74488): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015792.755:74489): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015792.757:74490): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303070 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015792.820:74491): pid=303070 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015792.820:74492): pid=303070 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015792.821:74493): pid=303070 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015792.824:74494): pid=303070 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015792.826:74495): pid=303070 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015792.826:74496): pid=303070 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015792.830:74497): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015792.830:74498): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015792.834:74499): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015792.835:74500): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015792.836:74501): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303088 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015792.887:74502): pid=303088 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015792.887:74503): pid=303088 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C6973742D6E6574776F726B73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015792.888:74504): pid=303088 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015792.891:74505): pid=303088 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015793.252:74506): pid=303088 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015793.252:74507): pid=303088 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015793.258:74508): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015793.258:74509): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015793.417:74510): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015793.417:74511): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015793.419:74512): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303126 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015793.480:74513): pid=303126 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015793.480:74514): pid=303126 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015793.481:74515): pid=303126 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015793.484:74516): pid=303126 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015793.487:74517): pid=303126 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015793.487:74518): pid=303126 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015793.493:74519): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015793.494:74520): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015793.499:74521): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015793.500:74522): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015793.501:74523): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303144 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015793.566:74524): pid=303144 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015793.566:74525): pid=303144 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015793.567:74526): pid=303144 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015793.569:74527): pid=303144 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015793.573:74528): pid=303144 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015793.573:74529): pid=303144 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015793.577:74530): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015793.577:74531): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015793.581:74532): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015793.581:74533): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015793.582:74534): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303162 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015793.648:74535): pid=303162 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015793.648:74536): pid=303162 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015793.649:74537): pid=303162 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015793.651:74538): pid=303162 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015793.654:74539): pid=303162 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015793.654:74540): pid=303162 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015793.659:74541): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015793.660:74542): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015793.665:74543): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015793.665:74544): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015793.666:74545): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303180 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015793.719:74546): pid=303180 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015793.719:74547): pid=303180 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015793.720:74548): pid=303180 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015793.723:74549): pid=303180 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015793.727:74550): pid=303180 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015793.727:74551): pid=303180 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015793.732:74552): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015793.732:74553): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015793.735:74554): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015793.735:74555): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015793.737:74556): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303198 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015793.809:74557): pid=303198 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015793.809:74558): pid=303198 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015793.810:74559): pid=303198 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015793.812:74560): pid=303198 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015793.815:74561): pid=303198 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015793.815:74562): pid=303198 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015793.820:74563): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015793.820:74564): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015793.826:74565): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015793.826:74566): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015793.827:74567): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303216 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015793.875:74568): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015793.875:74569): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015793.877:74570): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015793.878:74571): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015793.879:74572): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303232 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015793.937:74573): pid=303232 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015793.937:74574): pid=303232 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015793.938:74575): pid=303232 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015793.941:74576): pid=303232 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015793.946:74577): pid=303232 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015793.946:74578): pid=303232 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015793.951:74579): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015793.951:74580): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015793.953:74581): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015793.953:74582): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015793.954:74583): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303250 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015794.013:74584): pid=303250 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015794.013:74585): pid=303250 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015794.014:74586): pid=303250 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015794.016:74587): pid=303250 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015794.019:74588): pid=303250 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015794.019:74589): pid=303250 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015794.022:74590): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015794.022:74591): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015794.024:74592): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015794.025:74593): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015794.026:74594): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303268 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015794.115:74595): pid=303268 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015794.115:74596): pid=303268 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577202F6574632F636570682F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015794.115:74597): pid=303268 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015794.118:74598): pid=303268 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015794.121:74599): pid=303268 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015794.122:74600): pid=303268 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015794.125:74601): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015794.125:74602): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015794.128:74603): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015794.128:74604): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015794.129:74605): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303286 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015794.187:74606): pid=303286 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015794.188:74607): pid=303286 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015794.188:74608): pid=303286 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015794.191:74609): pid=303286 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015794.194:74610): pid=303286 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015794.194:74611): pid=303286 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015794.199:74612): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015794.200:74613): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015794.203:74614): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015794.203:74615): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015794.204:74616): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303304 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015794.262:74617): pid=303304 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015794.262:74618): pid=303304 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015794.263:74619): pid=303304 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015794.266:74620): pid=303304 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015794.269:74621): pid=303304 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015794.269:74622): pid=303304 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015794.274:74623): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015794.274:74624): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015794.277:74625): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015794.277:74626): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015794.279:74627): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303322 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015794.337:74628): pid=303322 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015794.337:74629): pid=303322 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015794.338:74630): pid=303322 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015794.340:74631): pid=303322 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015794.343:74632): pid=303322 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015794.343:74633): pid=303322 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015794.348:74634): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015794.348:74635): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015794.351:74636): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015794.351:74637): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015794.352:74638): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303340 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015794.411:74639): pid=303340 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015794.412:74640): pid=303340 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015794.412:74641): pid=303340 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015794.415:74642): pid=303340 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015794.418:74643): pid=303340 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015794.418:74644): pid=303340 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015794.422:74645): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015794.423:74646): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015794.426:74647): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015794.426:74648): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015794.427:74649): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303358 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015794.484:74650): pid=303358 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015794.484:74651): pid=303358 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015794.485:74652): pid=303358 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015794.487:74653): pid=303358 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015794.490:74654): pid=303358 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015794.490:74655): pid=303358 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015794.494:74656): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015794.494:74657): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015794.498:74658): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015794.498:74659): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015794.499:74660): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303376 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015794.550:74661): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015794.550:74662): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015794.554:74663): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015794.554:74664): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015794.555:74665): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303392 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015794.613:74666): pid=303392 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015794.614:74667): pid=303392 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015794.614:74668): pid=303392 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015794.617:74669): pid=303392 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015794.622:74670): pid=303392 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015794.622:74671): pid=303392 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015794.628:74672): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015794.628:74673): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015794.632:74674): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015794.633:74675): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015794.634:74676): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303410 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015794.692:74677): pid=303410 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015794.692:74678): pid=303410 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015794.693:74679): pid=303410 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015794.695:74680): pid=303410 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015794.698:74681): pid=303410 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015794.698:74682): pid=303410 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015794.703:74683): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015794.703:74684): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015794.708:74685): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015794.708:74686): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015794.709:74687): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303428 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015794.761:74688): pid=303428 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015794.761:74689): pid=303428 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015794.762:74690): pid=303428 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015794.764:74691): pid=303428 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015794.767:74692): pid=303428 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015794.768:74693): pid=303428 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015794.772:74694): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015794.772:74695): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015794.780:74696): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015794.780:74697): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015794.781:74698): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303446 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015794.838:74699): pid=303446 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015794.839:74700): pid=303446 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015794.839:74701): pid=303446 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015794.842:74702): pid=303446 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015794.846:74703): pid=303446 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015794.846:74704): pid=303446 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015794.852:74705): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015794.853:74706): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015794.858:74707): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015794.858:74708): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015794.860:74709): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303464 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015794.925:74710): pid=303464 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015794.926:74711): pid=303464 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015794.926:74712): pid=303464 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015794.929:74713): pid=303464 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015794.933:74714): pid=303464 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015794.933:74715): pid=303464 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015794.938:74716): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015794.938:74717): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015794.940:74718): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015794.940:74719): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015794.942:74720): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303482 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015795.005:74721): pid=303482 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015795.005:74722): pid=303482 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015795.006:74723): pid=303482 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015795.009:74724): pid=303482 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015795.012:74725): pid=303482 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015795.013:74726): pid=303482 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015795.016:74727): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015795.017:74728): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015795.018:74729): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015795.018:74730): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015795.020:74731): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303500 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015795.084:74732): pid=303500 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015795.084:74733): pid=303500 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015795.085:74734): pid=303500 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015795.088:74735): pid=303500 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015795.091:74736): pid=303500 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015795.091:74737): pid=303500 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015795.096:74738): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015795.096:74739): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015795.099:74740): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015795.100:74741): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015795.101:74742): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303518 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015795.164:74743): pid=303518 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015795.165:74744): pid=303518 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015795.165:74745): pid=303518 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015795.168:74746): pid=303518 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015795.171:74747): pid=303518 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015795.172:74748): pid=303518 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015795.176:74749): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015795.177:74750): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015795.180:74751): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015795.181:74752): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015795.182:74753): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303536 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015795.300:74754): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015795.300:74755): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015795.306:74756): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015795.306:74757): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015795.307:74758): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303552 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015795.368:74759): pid=303552 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015795.368:74760): pid=303552 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015795.370:74761): pid=303552 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015795.373:74762): pid=303552 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015795.378:74763): pid=303552 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015795.379:74764): pid=303552 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015795.382:74765): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015795.382:74766): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015795.384:74767): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015795.385:74768): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015795.386:74769): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303570 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015795.445:74770): pid=303570 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015795.445:74771): pid=303570 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363030202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015795.446:74772): pid=303570 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015795.448:74773): pid=303570 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015795.451:74774): pid=303570 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015795.452:74775): pid=303570 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015795.456:74776): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015795.456:74777): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015795.459:74778): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015795.459:74779): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015795.461:74780): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303588 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015795.511:74781): pid=303588 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015795.511:74782): pid=303588 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577202F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E67 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015795.511:74783): pid=303588 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015795.514:74784): pid=303588 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015795.518:74785): pid=303588 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015795.518:74786): pid=303588 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015795.523:74787): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015795.523:74788): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015795.527:74789): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015795.527:74790): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015795.529:74791): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303606 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015795.589:74792): pid=303606 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015795.590:74793): pid=303606 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015795.590:74794): pid=303606 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015795.593:74795): pid=303606 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015795.596:74796): pid=303606 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015795.597:74797): pid=303606 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015795.603:74798): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015795.603:74799): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015795.606:74800): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015795.607:74801): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015795.608:74802): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303624 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015795.670:74803): pid=303624 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015795.671:74804): pid=303624 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015795.671:74805): pid=303624 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015795.674:74806): pid=303624 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015795.678:74807): pid=303624 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015795.678:74808): pid=303624 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015795.684:74809): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015795.684:74810): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015795.689:74811): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015795.690:74812): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015795.692:74813): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303642 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015795.757:74814): pid=303642 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015795.757:74815): pid=303642 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015795.758:74816): pid=303642 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015795.761:74817): pid=303642 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015795.764:74818): pid=303642 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015795.765:74819): pid=303642 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015795.769:74820): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015795.770:74821): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015795.772:74822): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015795.772:74823): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015795.774:74824): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303660 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015795.835:74825): pid=303660 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015795.835:74826): pid=303660 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015795.836:74827): pid=303660 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015795.839:74828): pid=303660 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015795.842:74829): pid=303660 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015795.843:74830): pid=303660 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015795.849:74831): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015795.849:74832): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015795.852:74833): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015795.852:74834): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015795.854:74835): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303678 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015795.922:74836): pid=303678 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015795.922:74837): pid=303678 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015795.923:74838): pid=303678 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015795.926:74839): pid=303678 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015795.929:74840): pid=303678 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015795.930:74841): pid=303678 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015795.934:74842): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015795.935:74843): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015795.938:74844): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015795.938:74845): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015795.940:74846): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303696 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015795.997:74847): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015795.997:74848): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015796.000:74849): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015796.001:74850): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015796.002:74851): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303712 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015796.055:74852): pid=303712 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015796.055:74853): pid=303712 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015796.055:74854): pid=303712 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015796.060:74855): pid=303712 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015796.065:74856): pid=303712 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015796.066:74857): pid=303712 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765015796.075:74858): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015796.079:74859): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015796.089:74860): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015796.089:74861): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015796.094:74862): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015796.094:74863): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015796.096:74864): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303742 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015796.163:74865): pid=303742 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015796.164:74866): pid=303742 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363030202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015796.164:74867): pid=303742 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015796.178:74868): pid=303742 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765015796.181:74869): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015796.181:74870): pid=303742 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015796.182:74871): pid=303742 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015796.188:74872): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015796.188:74873): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015796.193:74874): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015796.193:74875): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015796.194:74876): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303785 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015796.258:74877): pid=303785 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015796.259:74878): pid=303785 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E67 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015796.260:74879): pid=303785 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015796.263:74880): pid=303785 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015796.267:74881): pid=303785 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015796.268:74882): pid=303785 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_STOP msg=audit(1765015796.271:74883): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015796.272:74884): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015796.272:74885): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_STOP msg=audit(1765015796.351:74886): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015796.379:74887): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015796.491:74888): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015796.491:74889): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015796.493:74890): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303827 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015796.557:74891): pid=303827 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015796.557:74892): pid=303827 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015796.558:74893): pid=303827 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015796.561:74894): pid=303827 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015796.565:74895): pid=303827 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015796.565:74896): pid=303827 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015796.570:74897): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015796.570:74898): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015799.488:74899): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015799.488:74900): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015799.489:74901): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303845 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015799.559:74902): pid=303845 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015799.560:74903): pid=303845 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015799.560:74904): pid=303845 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015799.563:74905): pid=303845 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015799.565:74906): pid=303845 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015799.566:74907): pid=303845 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015799.570:74908): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015799.570:74909): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015799.581:74910): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015799.581:74911): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015799.584:74912): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303863 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015799.645:74913): pid=303863 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015799.646:74914): pid=303863 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015799.646:74915): pid=303863 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015799.649:74916): pid=303863 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015800.124:74917): prog-id=2237 op=LOAD
type=SYSCALL msg=audit(1765015800.124:74917): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe3fec80e0 a2=90 a3=9500000000 items=0 ppid=303913 pid=303914 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=71 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015800.124:74917): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393731666661373935396330643066333730333361626161633463383530
type=BPF msg=audit(1765015800.181:74918): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015800.344:74919): pid=303863 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015800.345:74920): pid=303863 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015800.350:74921): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015800.351:74922): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015800.395:74923): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015800.396:74924): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015800.397:74925): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303934 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015800.456:74926): pid=303934 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015800.456:74927): pid=303934 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015800.457:74928): pid=303934 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015800.461:74929): pid=303934 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015800.463:74930): pid=303934 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015800.463:74931): pid=303934 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015800.468:74932): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015800.468:74933): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015800.471:74934): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015800.471:74935): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015800.473:74936): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=303952 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015800.532:74937): pid=303952 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015800.532:74938): pid=303952 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015800.534:74939): pid=303952 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015800.539:74940): pid=303952 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015801.088:74941): prog-id=2238 op=LOAD
type=SYSCALL msg=audit(1765015801.088:74941): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd85cc5a60 a2=90 a3=9500000000 items=0 ppid=304003 pid=304004 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=71 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015801.088:74941): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F303634376364333563316265356436336664666134316333646133393535
type=BPF msg=audit(1765015801.136:74942): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015801.405:74943): pid=303952 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015801.405:74944): pid=303952 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015801.411:74945): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015801.411:74946): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015801.483:74947): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015801.484:74948): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015801.485:74949): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=304031 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015801.583:74950): pid=304031 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015801.583:74951): pid=304031 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015801.584:74952): pid=304031 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015801.588:74953): pid=304031 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015801.591:74954): pid=304031 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015801.591:74955): pid=304031 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015801.596:74956): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015801.596:74957): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015801.599:74958): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015801.600:74959): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015801.601:74960): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=304049 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015801.669:74961): pid=304049 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015801.669:74962): pid=304049 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935205F6F726368206465706C6F79202D2D667369642031393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015801.670:74963): pid=304049 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015801.673:74964): pid=304049 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015802.217:74965): prog-id=2239 op=LOAD
type=SYSCALL msg=audit(1765015802.217:74965): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdea5b8640 a2=90 a3=9500000000 items=0 ppid=304098 pid=304099 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=71 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015802.217:74965): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F636138336264656363633466623362373239373032363465336436616430
type=BPF msg=audit(1765015802.277:74966): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015802.526:74967): pid=304049 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015802.526:74968): pid=304049 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015802.532:74969): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015802.532:74970): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015802.794:74971): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015802.794:74972): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015802.824:74973): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=304127 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015802.888:74974): pid=304127 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015802.888:74975): pid=304127 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015802.889:74976): pid=304127 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015802.903:74977): pid=304127 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765015802.905:74978): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015802.907:74979): pid=304127 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015802.907:74980): pid=304127 uid=1002 auid=1002 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015802.912:74981): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015802.912:74982): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_STOP msg=audit(1765015803.052:74983): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015805.476:74984): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015805.587:74985): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015806.420:74986): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=299981 suid=1003 rport=46396 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015806.420:74987): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299981 suid=1003  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765015806.423:74988): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765015806.424:74989): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765015806.424:74990): pid=299945 uid=0 auid=1003 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=299945 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="root"
type=SERVICE_START msg=audit(1765015808.475:74991): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015808.618:74992): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015816.475:74993): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1003 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015816.511:74994): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1003 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015821.475:74995): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015821.623:74996): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015826.481:74997): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015826.485:74998): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015826.489:74999): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015826.598:75000): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015826.724:75001): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015826.754:75002): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015833.472:75003): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015833.586:75004): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015836.209:75005): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015836.363:75006): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015837.988:75007): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=302755 suid=1002 rport=48272 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.103 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015837.988:75008): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=302755 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015837.991:75009): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015837.991:75010): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.103 addr=192.168.122.103 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015837.992:75011): pid=302752 uid=0 auid=1002 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=302752 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1765015838.221:75012): pid=304383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=304383 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765015838.222:75013): pid=304382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=304383 suid=74 rport=44324 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765015838.222:75014): pid=304382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=304383 suid=74 rport=44324 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765015838.268:75015): pid=304382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="ceph-admin" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015838.268:75016): pid=304382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:1d:06:01:4f:c9:f7:1d:b9:e2:70:3b:4f:f6:d7:a1:77:7f:a0:25:73:05:b6:4c:3e:7d:33:25:99:1d:b0:0a:c1 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765015838.296:75017): pid=304382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.106 addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015838.296:75018): pid=304382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=304383 suid=74 rport=44324 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765015838.298:75019): pid=304382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.106 addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765015838.298:75020): pid=304382 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1002 tty=(none) old-ses=4294967295 ses=72 res=1UID="root" OLD-AUID="unset" AUID="ceph-admin"
type=SYSCALL msg=audit(1765015838.298:75020): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffde0bab8c0 a2=4 a3=3ea items=0 ppid=182854 pid=304382 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=72 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015838.298:75020): proctitle=737368643A20636570682D61646D696E205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765015838.300:75021): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.106 addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_START msg=audit(1765015838.328:75022): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.106 addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015838.329:75023): pid=304385 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=304385 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="root"
type=CRED_ACQ msg=audit(1765015838.331:75024): pid=304385 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.106 addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_LOGIN msg=audit(1765015838.376:75025): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015838.376:75026): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015838.379:75027): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=304386 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015838.451:75028): pid=304386 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015838.452:75029): pid=304386 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015838.453:75030): pid=304386 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015838.458:75031): pid=304386 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015838.461:75032): pid=304386 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015838.461:75033): pid=304386 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015838.467:75034): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015838.467:75035): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015838.470:75036): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015838.471:75037): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015838.472:75038): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=304404 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015838.534:75039): pid=304404 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015838.534:75040): pid=304404 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015838.536:75041): pid=304404 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015838.539:75042): pid=304404 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=SERVICE_START msg=audit(1765015839.188:75043): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015839.376:75044): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765015840.383:75045): pid=304404 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015840.383:75046): pid=304404 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015840.389:75047): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015840.389:75048): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015840.425:75049): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015840.425:75050): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015840.427:75051): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=304632 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015840.494:75052): pid=304632 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015840.494:75053): pid=304632 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015840.495:75054): pid=304632 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015840.501:75055): pid=304632 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015840.504:75056): pid=304632 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015840.504:75057): pid=304632 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015840.508:75058): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015840.508:75059): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015840.512:75060): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015840.512:75061): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015840.513:75062): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=304650 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015840.576:75063): pid=304650 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015840.576:75064): pid=304650 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015840.577:75065): pid=304650 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015840.580:75066): pid=304650 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015841.271:75067): pid=304650 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015841.272:75068): pid=304650 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015841.333:75069): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015841.333:75070): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015841.337:75071): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015841.337:75072): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015841.338:75073): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=304700 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015841.404:75074): pid=304700 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015841.405:75075): pid=304700 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015841.405:75076): pid=304700 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015841.409:75077): pid=304700 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015841.412:75078): pid=304700 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015841.412:75079): pid=304700 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015841.417:75080): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015841.417:75081): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015841.420:75082): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015841.420:75083): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015841.422:75084): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=304718 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015841.484:75085): pid=304718 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015841.484:75086): pid=304718 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C6973742D6E6574776F726B73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015841.485:75087): pid=304718 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015841.487:75088): pid=304718 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015841.876:75089): pid=304718 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015841.876:75090): pid=304718 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015841.881:75091): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015841.881:75092): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015841.937:75093): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015841.937:75094): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015841.939:75095): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=304754 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015842.001:75096): pid=304754 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015842.001:75097): pid=304754 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015842.002:75098): pid=304754 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015842.005:75099): pid=304754 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015842.007:75100): pid=304754 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015842.008:75101): pid=304754 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015842.013:75102): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015842.013:75103): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015842.016:75104): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015842.017:75105): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015842.018:75106): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=304772 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015842.082:75107): pid=304772 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015842.082:75108): pid=304772 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015842.083:75109): pid=304772 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015842.086:75110): pid=304772 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015842.090:75111): pid=304772 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015842.090:75112): pid=304772 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015842.096:75113): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015842.096:75114): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015842.101:75115): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015842.101:75116): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015842.103:75117): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=304790 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015842.167:75118): pid=304790 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015842.167:75119): pid=304790 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015842.168:75120): pid=304790 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015842.170:75121): pid=304790 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015842.173:75122): pid=304790 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015842.174:75123): pid=304790 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015842.179:75124): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015842.180:75125): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015842.182:75126): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015842.182:75127): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015842.184:75128): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=304808 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015842.247:75129): pid=304808 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015842.247:75130): pid=304808 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015842.248:75131): pid=304808 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015842.250:75132): pid=304808 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015842.253:75133): pid=304808 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015842.253:75134): pid=304808 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015842.256:75135): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015842.257:75136): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015842.260:75137): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015842.260:75138): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015842.262:75139): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=304826 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015842.323:75140): pid=304826 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015842.323:75141): pid=304826 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015842.324:75142): pid=304826 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015842.326:75143): pid=304826 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015842.329:75144): pid=304826 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015842.329:75145): pid=304826 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015842.332:75146): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015842.333:75147): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015842.335:75148): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015842.335:75149): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015842.336:75150): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=304844 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015842.381:75151): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015842.382:75152): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015842.383:75153): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015842.383:75154): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015842.385:75155): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=304860 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015842.451:75156): pid=304860 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015842.452:75157): pid=304860 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015842.452:75158): pid=304860 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015842.455:75159): pid=304860 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015842.461:75160): pid=304860 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015842.461:75161): pid=304860 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015842.466:75162): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015842.466:75163): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015842.468:75164): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015842.468:75165): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015842.470:75166): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=304878 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015842.531:75167): pid=304878 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015842.531:75168): pid=304878 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015842.532:75169): pid=304878 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015842.534:75170): pid=304878 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015842.538:75171): pid=304878 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015842.538:75172): pid=304878 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015842.543:75173): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015842.543:75174): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015842.551:75175): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015842.551:75176): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015842.552:75177): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=304896 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015842.614:75178): pid=304896 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015842.614:75179): pid=304896 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577202F6574632F636570682F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015842.615:75180): pid=304896 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015842.617:75181): pid=304896 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015842.621:75182): pid=304896 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015842.622:75183): pid=304896 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015842.627:75184): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015842.627:75185): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015842.632:75186): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015842.632:75187): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015842.633:75188): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=304914 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015842.695:75189): pid=304914 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015842.696:75190): pid=304914 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015842.697:75191): pid=304914 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015842.700:75192): pid=304914 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015842.703:75193): pid=304914 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015842.704:75194): pid=304914 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015842.708:75195): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015842.709:75196): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015842.717:75197): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015842.717:75198): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015842.719:75199): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=304932 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015842.782:75200): pid=304932 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015842.783:75201): pid=304932 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015842.784:75202): pid=304932 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015842.786:75203): pid=304932 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015842.790:75204): pid=304932 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015842.790:75205): pid=304932 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015842.796:75206): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015842.796:75207): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015842.800:75208): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015842.800:75209): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015842.802:75210): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=304950 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015842.863:75211): pid=304950 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015842.863:75212): pid=304950 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015842.864:75213): pid=304950 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015842.866:75214): pid=304950 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015842.869:75215): pid=304950 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015842.869:75216): pid=304950 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015842.876:75217): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015842.876:75218): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015842.882:75219): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015842.882:75220): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015842.883:75221): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=304968 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015842.946:75222): pid=304968 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015842.946:75223): pid=304968 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015842.947:75224): pid=304968 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015842.949:75225): pid=304968 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015842.953:75226): pid=304968 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015842.953:75227): pid=304968 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015842.960:75228): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015842.961:75229): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015842.967:75230): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015842.967:75231): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015842.969:75232): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=304986 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015843.034:75233): pid=304986 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015843.035:75234): pid=304986 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015843.035:75235): pid=304986 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015843.038:75236): pid=304986 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015843.041:75237): pid=304986 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015843.041:75238): pid=304986 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015843.045:75239): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015843.045:75240): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015843.047:75241): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015843.048:75242): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015843.049:75243): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=305004 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015843.119:75244): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015843.119:75245): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015843.122:75246): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015843.122:75247): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015843.124:75248): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=305020 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015843.185:75249): pid=305020 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015843.185:75250): pid=305020 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015843.186:75251): pid=305020 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015843.188:75252): pid=305020 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015843.193:75253): pid=305020 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015843.194:75254): pid=305020 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015843.198:75255): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015843.198:75256): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015843.201:75257): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015843.201:75258): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015843.203:75259): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=305038 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015843.264:75260): pid=305038 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015843.264:75261): pid=305038 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015843.265:75262): pid=305038 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015843.267:75263): pid=305038 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015843.270:75264): pid=305038 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015843.270:75265): pid=305038 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015843.275:75266): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015843.275:75267): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015843.277:75268): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015843.278:75269): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015843.279:75270): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=305056 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015843.340:75271): pid=305056 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015843.340:75272): pid=305056 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015843.341:75273): pid=305056 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015843.343:75274): pid=305056 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015843.347:75275): pid=305056 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015843.347:75276): pid=305056 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015843.352:75277): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015843.353:75278): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015843.358:75279): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015843.359:75280): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015843.360:75281): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=305074 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015843.420:75282): pid=305074 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015843.420:75283): pid=305074 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015843.421:75284): pid=305074 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015843.423:75285): pid=305074 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015843.426:75286): pid=305074 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015843.426:75287): pid=305074 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015843.432:75288): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015843.432:75289): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015843.437:75290): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015843.438:75291): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015843.439:75292): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=305092 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015843.500:75293): pid=305092 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015843.501:75294): pid=305092 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015843.501:75295): pid=305092 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015843.503:75296): pid=305092 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015843.507:75297): pid=305092 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015843.507:75298): pid=305092 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015843.527:75299): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015843.527:75300): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015843.534:75301): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015843.534:75302): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015843.537:75303): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=305110 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015843.597:75304): pid=305110 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015843.598:75305): pid=305110 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015843.598:75306): pid=305110 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015843.601:75307): pid=305110 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015843.603:75308): pid=305110 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015843.603:75309): pid=305110 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015843.611:75310): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015843.611:75311): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015843.619:75312): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015843.619:75313): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015843.621:75314): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=305128 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015843.683:75315): pid=305128 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015843.683:75316): pid=305128 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015843.684:75317): pid=305128 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015843.686:75318): pid=305128 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015843.690:75319): pid=305128 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015843.690:75320): pid=305128 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015843.695:75321): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015843.695:75322): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015843.698:75323): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015843.698:75324): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015843.700:75325): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=305146 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015843.762:75326): pid=305146 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015843.763:75327): pid=305146 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015843.763:75328): pid=305146 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015843.766:75329): pid=305146 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015843.769:75330): pid=305146 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015843.769:75331): pid=305146 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015843.774:75332): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015843.775:75333): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015843.778:75334): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015843.778:75335): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015843.780:75336): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=305164 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015843.825:75337): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015843.825:75338): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015843.827:75339): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015843.827:75340): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015843.828:75341): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=305180 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015843.888:75342): pid=305180 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015843.888:75343): pid=305180 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015843.889:75344): pid=305180 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015843.892:75345): pid=305180 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015843.897:75346): pid=305180 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015843.897:75347): pid=305180 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015843.902:75348): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015843.903:75349): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015843.906:75350): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015843.906:75351): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015843.907:75352): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=305198 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015843.973:75353): pid=305198 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015843.973:75354): pid=305198 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363030202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015843.974:75355): pid=305198 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015843.977:75356): pid=305198 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015843.980:75357): pid=305198 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015843.980:75358): pid=305198 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015843.985:75359): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015843.985:75360): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015843.989:75361): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015843.990:75362): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015843.991:75363): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=305216 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015844.056:75364): pid=305216 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015844.056:75365): pid=305216 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577202F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E67 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015844.057:75366): pid=305216 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015844.060:75367): pid=305216 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015844.064:75368): pid=305216 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015844.064:75369): pid=305216 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015844.068:75370): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015844.069:75371): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015844.077:75372): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015844.077:75373): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015844.079:75374): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=305234 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015844.140:75375): pid=305234 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015844.140:75376): pid=305234 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015844.141:75377): pid=305234 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015844.143:75378): pid=305234 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015844.147:75379): pid=305234 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015844.147:75380): pid=305234 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015844.152:75381): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015844.152:75382): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015844.158:75383): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015844.158:75384): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015844.160:75385): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=305252 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015844.223:75386): pid=305252 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015844.223:75387): pid=305252 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015844.224:75388): pid=305252 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015844.226:75389): pid=305252 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015844.229:75390): pid=305252 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015844.230:75391): pid=305252 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015844.234:75392): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015844.234:75393): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015844.237:75394): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015844.237:75395): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015844.239:75396): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=305270 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015844.300:75397): pid=305270 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015844.300:75398): pid=305270 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015844.301:75399): pid=305270 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015844.304:75400): pid=305270 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015844.307:75401): pid=305270 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015844.307:75402): pid=305270 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015844.312:75403): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015844.312:75404): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015844.315:75405): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015844.315:75406): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015844.316:75407): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=305288 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015844.379:75408): pid=305288 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015844.379:75409): pid=305288 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015844.380:75410): pid=305288 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015844.383:75411): pid=305288 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015844.386:75412): pid=305288 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015844.386:75413): pid=305288 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015844.391:75414): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015844.391:75415): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015844.394:75416): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015844.394:75417): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015844.410:75418): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=305306 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015844.474:75419): pid=305306 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015844.474:75420): pid=305306 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015844.475:75421): pid=305306 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015844.478:75422): pid=305306 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015844.481:75423): pid=305306 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015844.481:75424): pid=305306 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015844.486:75425): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015844.486:75426): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015844.490:75427): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015844.490:75428): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015844.491:75429): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=305324 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015844.549:75430): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015844.549:75431): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015844.553:75432): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015844.553:75433): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015844.555:75434): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=305340 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015844.615:75435): pid=305340 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015844.616:75436): pid=305340 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015844.616:75437): pid=305340 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015844.619:75438): pid=305340 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015844.624:75439): pid=305340 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015844.624:75440): pid=305340 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015844.629:75441): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015844.629:75442): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015844.632:75443): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015844.632:75444): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015844.634:75445): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=305358 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015844.695:75446): pid=305358 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015844.695:75447): pid=305358 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363030202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015844.696:75448): pid=305358 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015844.698:75449): pid=305358 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015844.701:75450): pid=305358 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015844.701:75451): pid=305358 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015844.706:75452): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015844.706:75453): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015844.709:75454): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015844.709:75455): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015844.710:75456): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=305376 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015844.764:75457): pid=305376 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015844.765:75458): pid=305376 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E67 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015844.765:75459): pid=305376 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015844.768:75460): pid=305376 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015844.771:75461): pid=305376 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015844.771:75462): pid=305376 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015844.775:75463): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015844.775:75464): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015845.000:75465): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015845.000:75466): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015845.001:75467): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=305394 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015845.065:75468): pid=305394 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015845.066:75469): pid=305394 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015845.066:75470): pid=305394 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015845.070:75471): pid=305394 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015845.073:75472): pid=305394 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015845.073:75473): pid=305394 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015845.077:75474): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015845.077:75475): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015846.806:75476): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015846.806:75477): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015846.807:75478): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=305412 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015846.875:75479): pid=305412 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015846.875:75480): pid=305412 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015846.876:75481): pid=305412 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015846.879:75482): pid=305412 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015846.882:75483): pid=305412 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015846.883:75484): pid=305412 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015846.887:75485): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015846.887:75486): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015846.890:75487): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015846.890:75488): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015846.892:75489): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=305430 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015846.948:75490): pid=305430 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015846.948:75491): pid=305430 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=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 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015846.949:75492): pid=305430 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015846.952:75493): pid=305430 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=BPF msg=audit(1765015847.501:75494): prog-id=2240 op=LOAD
type=SYSCALL msg=audit(1765015847.501:75494): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe66c94d50 a2=90 a3=9500000000 items=0 ppid=305480 pid=305481 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=72 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015847.501:75494): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F313563313830316539626131356232636431376661343966613365336462
type=BPF msg=audit(1765015847.549:75495): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765015847.724:75496): pid=305430 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015847.724:75497): pid=305430 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015847.730:75498): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015847.730:75499): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015847.988:75500): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015847.988:75501): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015847.989:75502): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=305501 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015848.027:75503): pid=305501 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015848.027:75504): pid=305501 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015848.028:75505): pid=305501 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015848.031:75506): pid=305501 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015848.033:75507): pid=305501 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015848.033:75508): pid=305501 uid=1002 auid=1002 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015848.037:75509): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015848.037:75510): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015852.478:75511): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015852.631:75512): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015857.479:75513): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015857.484:75514): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015857.489:75515): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015857.656:75516): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015857.714:75517): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015857.848:75518): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015864.477:75519): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015864.632:75520): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015866.478:75521): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015866.584:75522): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015869.472:75523): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015869.652:75524): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015883.475:75525): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015883.612:75526): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015888.477:75527): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015888.480:75528): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015888.484:75529): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015888.683:75530): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015888.703:75531): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015888.715:75532): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015888.894:75533): pid=305751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=305751 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765015889.132:75534): pid=305750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=305751 suid=74 rport=39188 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765015889.132:75535): pid=305750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=305751 suid=74 rport=39188 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765015891.485:75536): pid=305750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=305751 suid=74 rport=39188 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765015891.485:75537): pid=305750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=305751 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765015891.486:75538): pid=305750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=101.47.160.186 addr=101.47.160.186 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015891.486:75539): pid=305750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=305750 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765015891.486:75540): pid=305750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015895.477:75541): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015895.623:75542): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015897.474:75543): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015897.598:75544): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015900.478:75545): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015900.642:75546): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015901.807:75547): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=304385 suid=1002 rport=44324 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.106 terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015901.807:75548): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=304385 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015901.809:75549): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.106 addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015901.810:75550): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.106 addr=192.168.122.106 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015901.810:75551): pid=304382 uid=0 auid=1002 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=304382 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1765015902.051:75552): pid=306004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306004 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765015902.052:75553): pid=306003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=306004 suid=74 rport=57270 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765015902.052:75554): pid=306003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=306004 suid=74 rport=57270 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765015902.088:75555): pid=306003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="ceph-admin" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015902.088:75556): pid=306003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:1d:06:01:4f:c9:f7:1d:b9:e2:70:3b:4f:f6:d7:a1:77:7f:a0:25:73:05:b6:4c:3e:7d:33:25:99:1d:b0:0a:c1 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765015902.115:75557): pid=306003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.108 addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765015902.116:75558): pid=306003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=306004 suid=74 rport=57270 laddr=192.168.122.108 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765015902.118:75559): pid=306003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.108 addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765015902.118:75560): pid=306003 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1002 tty=(none) old-ses=4294967295 ses=73 res=1UID="root" OLD-AUID="unset" AUID="ceph-admin"
type=SYSCALL msg=audit(1765015902.118:75560): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe27c29b80 a2=4 a3=3ea items=0 ppid=182854 pid=306003 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=73 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="ceph-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765015902.118:75560): proctitle=737368643A20636570682D61646D696E205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765015902.120:75561): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.108 addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_START msg=audit(1765015902.151:75562): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.108 addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015902.153:75563): pid=306006 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306006 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="root"
type=CRED_ACQ msg=audit(1765015902.154:75564): pid=306006 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ceph-admin" exe="/usr/sbin/sshd" hostname=192.168.122.108 addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin"
type=USER_LOGIN msg=audit(1765015902.199:75565): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015902.199:75566): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015902.202:75567): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306007 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015902.260:75568): pid=306007 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015902.260:75569): pid=306007 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015902.261:75570): pid=306007 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015902.265:75571): pid=306007 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015902.268:75572): pid=306007 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015902.268:75573): pid=306007 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015902.272:75574): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015902.272:75575): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015902.274:75576): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015902.275:75577): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015902.276:75578): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306025 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015902.327:75579): pid=306025 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015902.327:75580): pid=306025 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015902.327:75581): pid=306025 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015902.334:75582): pid=306025 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015903.893:75583): pid=306025 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015903.893:75584): pid=306025 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015903.898:75585): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015903.899:75586): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015903.947:75587): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015903.948:75588): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015903.949:75589): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306260 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015904.014:75590): pid=306260 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015904.014:75591): pid=306260 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015904.015:75592): pid=306260 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015904.020:75593): pid=306260 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015904.022:75594): pid=306260 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015904.022:75595): pid=306260 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015904.029:75596): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015904.029:75597): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015904.032:75598): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015904.032:75599): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015904.034:75600): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306285 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015904.095:75601): pid=306285 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015904.095:75602): pid=306285 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015904.096:75603): pid=306285 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015904.098:75604): pid=306285 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015904.696:75605): pid=306285 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015904.696:75606): pid=306285 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015904.761:75607): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015904.761:75608): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015904.764:75609): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015904.764:75610): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015904.766:75611): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306336 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015904.819:75612): pid=306336 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015904.819:75613): pid=306336 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015904.820:75614): pid=306336 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015904.822:75615): pid=306336 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015904.825:75616): pid=306336 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015904.825:75617): pid=306336 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015904.829:75618): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015904.829:75619): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015904.831:75620): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015904.831:75621): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015904.832:75622): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306354 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015904.890:75623): pid=306354 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015904.890:75624): pid=306354 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C6973742D6E6574776F726B73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015904.891:75625): pid=306354 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015904.893:75626): pid=306354 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015905.218:75627): pid=306354 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015905.218:75628): pid=306354 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015905.222:75629): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015905.222:75630): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015905.572:75631): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015905.573:75632): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015905.574:75633): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306392 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015905.638:75634): pid=306392 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015905.638:75635): pid=306392 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015905.639:75636): pid=306392 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015905.642:75637): pid=306392 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015905.645:75638): pid=306392 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015905.646:75639): pid=306392 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015905.651:75640): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015905.651:75641): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015905.657:75642): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015905.657:75643): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015905.658:75644): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306410 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015905.717:75645): pid=306410 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015905.718:75646): pid=306410 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015905.718:75647): pid=306410 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015905.721:75648): pid=306410 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015905.724:75649): pid=306410 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015905.725:75650): pid=306410 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015905.729:75651): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015905.730:75652): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015905.734:75653): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015905.734:75654): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015905.735:75655): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306428 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015905.795:75656): pid=306428 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015905.796:75657): pid=306428 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015905.796:75658): pid=306428 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015905.799:75659): pid=306428 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015905.802:75660): pid=306428 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015905.802:75661): pid=306428 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015905.806:75662): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015905.806:75663): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015905.811:75664): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015905.811:75665): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015905.813:75666): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306446 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015905.875:75667): pid=306446 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015905.875:75668): pid=306446 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015905.876:75669): pid=306446 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015906.509:75670): pid=306446 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015906.512:75671): pid=306446 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015906.513:75672): pid=306446 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015906.517:75673): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015906.517:75674): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015906.521:75675): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015906.521:75676): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015906.524:75677): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306464 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015906.593:75678): pid=306464 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015906.594:75679): pid=306464 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015906.594:75680): pid=306464 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015906.596:75681): pid=306464 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015906.599:75682): pid=306464 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015906.599:75683): pid=306464 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015906.603:75684): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015906.604:75685): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015906.611:75686): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015906.611:75687): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015906.612:75688): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306482 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015906.669:75689): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015906.669:75690): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015906.673:75691): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015906.673:75692): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015906.675:75693): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306498 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015906.731:75694): pid=306498 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015906.731:75695): pid=306498 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015906.732:75696): pid=306498 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015906.734:75697): pid=306498 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015906.739:75698): pid=306498 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015906.739:75699): pid=306498 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015906.743:75700): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015906.743:75701): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015906.746:75702): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015906.746:75703): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015906.747:75704): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306516 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015906.810:75705): pid=306516 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015906.810:75706): pid=306516 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015906.811:75707): pid=306516 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015906.814:75708): pid=306516 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015906.817:75709): pid=306516 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015906.817:75710): pid=306516 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015906.821:75711): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015906.821:75712): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015906.824:75713): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015906.824:75714): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015906.825:75715): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306534 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015906.885:75716): pid=306534 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015906.885:75717): pid=306534 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636F6E662E6E6577202F6574632F636570682F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015906.886:75718): pid=306534 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015906.888:75719): pid=306534 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015906.891:75720): pid=306534 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015906.891:75721): pid=306534 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015906.895:75722): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015906.895:75723): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015906.898:75724): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015906.898:75725): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015906.900:75726): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306552 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015906.947:75727): pid=306552 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015906.947:75728): pid=306552 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015906.947:75729): pid=306552 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015906.949:75730): pid=306552 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015906.951:75731): pid=306552 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015906.951:75732): pid=306552 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015906.954:75733): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015906.954:75734): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015906.957:75735): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015906.957:75736): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015906.958:75737): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306570 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015907.001:75738): pid=306570 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015907.001:75739): pid=306570 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015907.002:75740): pid=306570 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015907.004:75741): pid=306570 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015907.006:75742): pid=306570 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015907.006:75743): pid=306570 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015907.010:75744): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015907.010:75745): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015907.015:75746): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015907.015:75747): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015907.016:75748): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306588 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015907.071:75749): pid=306588 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015907.071:75750): pid=306588 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015907.072:75751): pid=306588 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015907.077:75752): pid=306588 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015907.079:75753): pid=306588 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015907.080:75754): pid=306588 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015907.084:75755): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015907.084:75756): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015907.087:75757): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015907.087:75758): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015907.088:75759): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306606 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015907.146:75760): pid=306606 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015907.146:75761): pid=306606 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015907.147:75762): pid=306606 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015907.149:75763): pid=306606 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015907.152:75764): pid=306606 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015907.153:75765): pid=306606 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015907.184:75766): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015907.185:75767): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015907.191:75768): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015907.191:75769): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015907.193:75770): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306624 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015907.250:75771): pid=306624 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015907.250:75772): pid=306624 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015907.251:75773): pid=306624 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015907.253:75774): pid=306624 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015907.256:75775): pid=306624 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015907.256:75776): pid=306624 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015907.260:75777): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015907.260:75778): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015907.264:75779): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015907.264:75780): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015907.265:75781): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306642 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015907.311:75782): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015907.311:75783): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015907.314:75784): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015907.314:75785): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015907.315:75786): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306658 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015907.377:75787): pid=306658 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015907.378:75788): pid=306658 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015907.378:75789): pid=306658 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015907.381:75790): pid=306658 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015907.385:75791): pid=306658 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015907.386:75792): pid=306658 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015907.390:75793): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015907.390:75794): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015907.392:75795): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015907.393:75796): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015907.394:75797): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306676 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015907.456:75798): pid=306676 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015907.456:75799): pid=306676 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015907.457:75800): pid=306676 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015907.460:75801): pid=306676 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015907.462:75802): pid=306676 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015907.463:75803): pid=306676 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015907.467:75804): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015907.467:75805): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015907.470:75806): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015907.470:75807): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015907.472:75808): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306694 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015907.536:75809): pid=306694 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015907.537:75810): pid=306694 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E662E6E6577202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015907.537:75811): pid=306694 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015907.540:75812): pid=306694 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015907.543:75813): pid=306694 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015907.543:75814): pid=306694 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015907.548:75815): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015907.548:75816): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015907.552:75817): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015907.552:75818): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015907.553:75819): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306712 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015907.614:75820): pid=306712 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015907.614:75821): pid=306712 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015907.615:75822): pid=306712 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015907.617:75823): pid=306712 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015907.620:75824): pid=306712 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015907.621:75825): pid=306712 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015907.624:75826): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015907.625:75827): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015907.627:75828): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015907.627:75829): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015907.629:75830): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306730 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015907.690:75831): pid=306730 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015907.690:75832): pid=306730 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F63657068 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015907.693:75833): pid=306730 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015907.696:75834): pid=306730 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015907.699:75835): pid=306730 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015907.699:75836): pid=306730 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015907.703:75837): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015907.703:75838): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015907.705:75839): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015907.705:75840): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015907.707:75841): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306748 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015907.766:75842): pid=306748 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015907.767:75843): pid=306748 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015907.767:75844): pid=306748 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015907.770:75845): pid=306748 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015907.772:75846): pid=306748 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015907.773:75847): pid=306748 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015907.776:75848): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015907.777:75849): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015907.779:75850): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015907.779:75851): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015907.781:75852): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306766 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015907.842:75853): pid=306766 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015907.843:75854): pid=306766 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015907.843:75855): pid=306766 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015907.846:75856): pid=306766 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015907.850:75857): pid=306766 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015907.850:75858): pid=306766 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015907.855:75859): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015907.856:75860): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015907.859:75861): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015907.859:75862): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015907.860:75863): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306784 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015907.920:75864): pid=306784 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015907.920:75865): pid=306784 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015907.921:75866): pid=306784 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015907.923:75867): pid=306784 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015907.926:75868): pid=306784 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015907.927:75869): pid=306784 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015907.930:75870): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015907.931:75871): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015907.933:75872): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015907.934:75873): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015907.935:75874): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306802 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015907.987:75875): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015907.987:75876): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015907.996:75877): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015907.996:75878): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015907.998:75879): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306818 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015908.057:75880): pid=306818 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015908.057:75881): pid=306818 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015908.058:75882): pid=306818 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015908.060:75883): pid=306818 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015908.066:75884): pid=306818 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015908.066:75885): pid=306818 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015908.071:75886): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015908.071:75887): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015908.075:75888): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015908.075:75889): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015908.077:75890): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306836 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015908.137:75891): pid=306836 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015908.137:75892): pid=306836 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363030202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015908.138:75893): pid=306836 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015908.140:75894): pid=306836 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015908.143:75895): pid=306836 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015908.144:75896): pid=306836 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015908.147:75897): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015908.147:75898): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015908.151:75899): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015908.151:75900): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015908.153:75901): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306854 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015908.214:75902): pid=306854 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015908.214:75903): pid=306854 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577202F6574632F636570682F636570682E636C69656E742E61646D696E2E6B657972696E67 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015908.215:75904): pid=306854 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015908.218:75905): pid=306854 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015908.221:75906): pid=306854 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015908.222:75907): pid=306854 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015908.227:75908): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015908.227:75909): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015908.232:75910): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015908.232:75911): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015908.234:75912): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306872 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015908.294:75913): pid=306872 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015908.294:75914): pid=306872 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015908.295:75915): pid=306872 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015908.297:75916): pid=306872 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015908.301:75917): pid=306872 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015908.301:75918): pid=306872 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015908.305:75919): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015908.305:75920): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015908.308:75921): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015908.308:75922): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015908.309:75923): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306890 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015908.372:75924): pid=306890 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015908.372:75925): pid=306890 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D6B646972202D70202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E666967 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015908.373:75926): pid=306890 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015908.375:75927): pid=306890 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015908.378:75928): pid=306890 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015908.378:75929): pid=306890 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015908.382:75930): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015908.382:75931): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015908.385:75932): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015908.385:75933): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015908.387:75934): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306908 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015908.458:75935): pid=306908 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015908.459:75936): pid=306908 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=746F756368202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015908.459:75937): pid=306908 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015908.462:75938): pid=306908 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015908.465:75939): pid=306908 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015908.466:75940): pid=306908 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015908.470:75941): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015908.470:75942): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015908.475:75943): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015908.475:75944): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015908.476:75945): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306926 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015908.535:75946): pid=306926 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015908.535:75947): pid=306926 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220636570682D61646D696E202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D386537663338303233336538 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015908.536:75948): pid=306926 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015908.540:75949): pid=306926 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015908.544:75950): pid=306926 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015908.544:75951): pid=306926 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015908.549:75952): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015908.549:75953): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015908.551:75954): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015908.552:75955): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015908.553:75956): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306944 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015908.617:75957): pid=306944 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015908.618:75958): pid=306944 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363434202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015908.618:75959): pid=306944 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015908.621:75960): pid=306944 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015908.623:75961): pid=306944 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015908.624:75962): pid=306944 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015908.628:75963): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015908.628:75964): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015908.632:75965): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015908.632:75966): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015908.633:75967): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306962 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_END msg=audit(1765015908.677:75968): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015908.677:75969): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015908.680:75970): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015908.680:75971): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015908.682:75972): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306978 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015908.740:75973): pid=306978 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015908.741:75974): pid=306978 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686F776E202D5220303A30202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015908.741:75975): pid=306978 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015908.744:75976): pid=306978 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015908.749:75977): pid=306978 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015908.749:75978): pid=306978 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015908.753:75979): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015908.753:75980): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015908.756:75981): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015908.756:75982): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015908.757:75983): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=306996 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015908.826:75984): pid=306996 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015908.826:75985): pid=306996 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=63686D6F6420363030202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015908.827:75986): pid=306996 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015908.831:75987): pid=306996 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015908.834:75988): pid=306996 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015908.834:75989): pid=306996 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015908.839:75990): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015908.839:75991): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015908.841:75992): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015908.841:75993): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015908.843:75994): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=307014 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015908.912:75995): pid=307014 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015908.912:75996): pid=307014 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6D76202F746D702F6365706861646D2D31393339653835312D623130632D356333622D396262372D3865376633383032333365382F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E672E6E6577202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F636F6E6669672F636570682E636C69656E742E61646D696E2E6B657972696E67 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015908.913:75997): pid=307014 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015908.916:75998): pid=307014 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015908.919:75999): pid=307014 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015908.920:76000): pid=307014 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015908.925:76001): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015908.925:76002): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015909.138:76003): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015909.139:76004): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015909.140:76005): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=307032 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015909.200:76006): pid=307032 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015909.200:76007): pid=307032 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015909.201:76008): pid=307032 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015909.204:76009): pid=307032 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015909.208:76010): pid=307032 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015909.209:76011): pid=307032 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015909.212:76012): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015909.213:76013): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015909.421:76014): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015909.422:76015): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015909.423:76016): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=307050 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015909.483:76017): pid=307050 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015909.483:76018): pid=307050 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015909.484:76019): pid=307050 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015909.487:76020): pid=307050 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015909.490:76021): pid=307050 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015909.491:76022): pid=307050 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015909.495:76023): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015909.495:76024): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015914.475:76025): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015914.625:76026): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015919.485:76027): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015919.489:76028): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015919.492:76029): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015919.615:76030): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015919.743:76031): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015919.827:76032): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015926.209:76033): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015926.347:76034): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015928.493:76035): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015928.604:76036): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015931.478:76037): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015931.658:76038): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015945.474:76039): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015945.618:76040): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015950.485:76041): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015950.488:76042): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015950.492:76043): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015950.606:76044): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015950.764:76045): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015950.794:76046): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015956.471:76047): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015956.616:76048): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015959.471:76049): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015959.618:76050): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015962.495:76051): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015962.639:76052): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765015969.508:76053): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015969.508:76054): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015969.510:76055): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=307409 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015969.574:76056): pid=307409 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015969.574:76057): pid=307409 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015969.576:76058): pid=307409 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015969.580:76059): pid=307409 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015969.582:76060): pid=307409 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015969.584:76061): pid=307409 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015969.586:76062): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015969.587:76063): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015969.590:76064): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015969.590:76065): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015969.591:76066): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=307427 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015969.650:76067): pid=307427 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015969.650:76068): pid=307427 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015969.652:76069): pid=307427 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015969.654:76070): pid=307427 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015970.288:76071): pid=307427 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015970.288:76072): pid=307427 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015970.384:76073): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015970.385:76074): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765015970.645:76075): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765015970.645:76076): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765015970.647:76077): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=307478 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765015970.711:76078): pid=307478 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765015970.711:76079): pid=307478 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765015970.712:76080): pid=307478 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765015970.715:76081): pid=307478 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015970.718:76082): pid=307478 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765015970.718:76083): pid=307478 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765015970.722:76084): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765015970.722:76085): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765015976.473:76086): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015976.602:76087): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015981.478:76088): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015981.482:76089): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015981.486:76090): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015981.640:76091): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015981.734:76092): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015981.785:76093): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015987.471:76094): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015987.591:76095): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015990.473:76096): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015990.585:76097): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765015993.475:76098): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765015993.642:76099): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016007.473:76100): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016007.629:76101): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016012.477:76102): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016012.479:76103): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016012.482:76104): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016012.641:76105): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016012.728:76106): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016012.775:76107): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016018.473:76108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016018.590:76109): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016021.472:76110): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016021.623:76111): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016024.481:76112): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016024.618:76113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765016030.738:76114): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016030.738:76115): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016030.741:76116): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=307834 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016030.805:76117): pid=307834 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016030.806:76118): pid=307834 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016030.807:76119): pid=307834 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016030.811:76120): pid=307834 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016030.813:76121): pid=307834 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016030.814:76122): pid=307834 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016030.818:76123): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016030.818:76124): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765016030.823:76125): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016030.823:76126): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016030.824:76127): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=307852 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016030.882:76128): pid=307852 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016030.883:76129): pid=307852 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F75742038393520636865636B2D686F7374 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016030.883:76130): pid=307852 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016030.886:76131): pid=307852 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016031.304:76132): pid=307852 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016031.304:76133): pid=307852 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016031.309:76134): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016031.310:76135): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765016031.352:76136): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016031.352:76137): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016031.353:76138): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=307891 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016031.408:76139): pid=307891 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016031.408:76140): pid=307891 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016031.408:76141): pid=307891 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016031.411:76142): pid=307891 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016031.413:76143): pid=307891 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016031.413:76144): pid=307891 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016031.417:76145): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016031.417:76146): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765016031.419:76147): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016031.420:76148): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016031.421:76149): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=307909 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016031.474:76150): pid=307909 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016031.474:76151): pid=307909 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016031.475:76152): pid=307909 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016031.477:76153): pid=307909 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016032.171:76154): pid=307909 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016032.172:76155): pid=307909 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016032.199:76156): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016032.199:76157): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765016032.445:76158): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016032.445:76159): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016032.447:76160): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=307959 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016032.507:76161): pid=307959 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016032.508:76162): pid=307959 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016032.508:76163): pid=307959 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016032.512:76164): pid=307959 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016032.516:76165): pid=307959 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016032.516:76166): pid=307959 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016032.520:76167): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016032.520:76168): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765016038.482:76169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016038.621:76170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016043.474:76171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016043.477:76172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016043.481:76173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016043.606:76174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016043.687:76175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016043.739:76176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016044.366:76177): pid=308059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=308059 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1765016044.916:76178): pid=308060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=308060 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765016045.965:76179): pid=308058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=308059 suid=74 rport=55628 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765016045.965:76180): pid=308058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=308059 suid=74 rport=55628 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016046.033:76181): pid=308061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=308061 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_START msg=audit(1765016049.474:76182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016049.595:76183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016052.475:76184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016052.583:76185): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016053.905:76186): pid=308058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=308059 suid=74 rport=55628 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016053.906:76187): pid=308058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=308059 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765016053.907:76188): pid=308058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=101.47.160.186 addr=101.47.160.186 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016053.907:76189): pid=308058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=308058 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765016053.907:76190): pid=308058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=ssh res=failed'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016054.625:76191): dev=tap949736e1-2a prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016054.625:76191): arch=c000003e syscall=46 success=yes exit=60 a0=34 a1=7fff2bfe50a0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016054.625:76191): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=SERVICE_START msg=audit(1765016054.660:76192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=NETFILTER_CFG msg=audit(1765016054.769:76193): table=filter:2 family=2 entries=18 op=nft_register_chain pid=308163 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016054.769:76193): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7fffe2841e00 a2=0 a3=7fffe2841dec items=0 ppid=262401 pid=308163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016054.769:76193): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016054.769:76194): table=mangle:3 family=2 entries=24 op=nft_register_chain pid=308163 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016054.769:76194): arch=c000003e syscall=46 success=yes exit=3652 a0=3 a1=7fffe2841e00 a2=0 a3=7fffe2841dec items=0 ppid=262401 pid=308163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016054.769:76194): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016054.778:76195): table=raw:4 family=2 entries=9 op=nft_register_chain pid=308163 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016054.778:76195): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7fffe2841e00 a2=0 a3=100 items=0 ppid=262401 pid=308163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016054.778:76195): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016054.820:76196): table=filter:5 family=10 entries=18 op=nft_register_chain pid=308171 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016054.820:76196): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffc91076f60 a2=0 a3=7ffc91076f4c items=0 ppid=262401 pid=308171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016054.820:76196): proctitle=6970367461626C65732D726573746F7265002D6E
type=SERVICE_STOP msg=audit(1765016054.825:76197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=NETFILTER_CFG msg=audit(1765016054.821:76198): table=mangle:6 family=10 entries=22 op=nft_register_chain pid=308171 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016054.821:76198): arch=c000003e syscall=46 success=yes exit=3304 a0=3 a1=7ffc91076f60 a2=0 a3=7ffc91076f4c items=0 ppid=262401 pid=308171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016054.821:76198): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016054.834:76199): table=raw:7 family=10 entries=9 op=nft_register_chain pid=308171 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016054.834:76199): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffc91076f60 a2=0 a3=100 items=0 ppid=262401 pid=308171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016054.834:76199): proctitle=6970367461626C65732D726573746F7265002D6E
type=USER_ACCT msg=audit(1765016055.140:76200): pid=308189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765016055.141:76201): pid=308189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071646863702D30343937346462352D373236312D346165322D623635392D39393236356361386430393120656E762050524F434553535F5441473D646E736D6173712D30343937346462352D373236312D346165322D623635392D39393236356361386430393120646E736D617371202D2D6E6F2D686F737473202D2D6E6F2D7265736F6C76202D2D7069642D66696C653D2F7661722F6C69622F6E657574726F6E2F646863702F30343937346462352D373236312D346165322D623635392D3939323635636138643039312F706964202D2D646863702D686F73747366696C653D2F7661722F6C69622F6E657574726F6E2F646863702F30343937346462352D373236312D346165322D623635392D3939323635636138643039312F686F7374202D2D6164646E2D686F7374733D2F7661722F6C69622F6E657574726F6E2F646863702F30343937346462352D373236312D346165322D623635392D3939323635636138643039312F6164646E5F686F737473202D2D646863702D6F70747366696C653D2F7661722F6C69622F6E657574726F6E2F646863702F30343937346462352D373236312D346165322D623635392D3939323635636138643039312F6F707473202D2D646863702D6C6561736566696C653D2F7661722F6C69622F6E657574726F6E2F646863702F30343937346462352D373236312D346165322D623635392D3939323635636138643039312F6C6561736573202D2D646863702D6D617463683D7365743A697078652C313735202D2D646863702D75736572636C6173733D7365743A69707865362C69505845202D2D6C6F63616C2D73657276696365202D2D62696E642D64796E616D6963202D2D646863702D72616E67653D7365743A7375626E65742D35373132333266342D383539392D343030612D613833612D3364613965323030306437362C31302E3130302E302E302C7374617469632C3235352E3235352E3235352E3234302C383634303073202D2D646863702D6F7074696F6E2D666F7263653D6F7074696F6E3A6D74752C31343432202D2D646863702D6C656173652D6D61783D3136202D2D636F6E662D66696C653D2F6465762F6E756C6C202D2D646F6D61696E3D6F70656E737461636B6C6F63616C exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765016055.141:76202): pid=308189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765016055.143:76203): pid=308189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016055.643:76204): prog-id=2241 op=LOAD
type=SYSCALL msg=audit(1765016055.643:76204): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffe22df4010 a2=90 a3=9500000001 items=0 ppid=308228 pid=308229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016055.643:76204): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F343135653438383636393062353733656164373666336330396163343933
type=USER_END msg=audit(1765016055.724:76205): pid=308189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765016055.725:76206): pid=308189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016066.740:76207): dev=tap90d179d9-70 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016066.740:76207): arch=c000003e syscall=46 success=yes exit=60 a0=34 a1=7fff2bfe50a0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016066.740:76207): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=NETFILTER_CFG msg=audit(1765016066.861:76208): table=filter:2 family=2 entries=18 op=nft_register_chain pid=308348 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016066.861:76208): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffc04c5b800 a2=0 a3=7ffc04c5b7ec items=0 ppid=262401 pid=308348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016066.861:76208): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016066.862:76209): table=mangle:3 family=2 entries=24 op=nft_register_chain pid=308348 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016066.862:76209): arch=c000003e syscall=46 success=yes exit=3652 a0=3 a1=7ffc04c5b800 a2=0 a3=7ffc04c5b7ec items=0 ppid=262401 pid=308348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016066.862:76209): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016066.875:76210): table=raw:4 family=2 entries=9 op=nft_register_chain pid=308348 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016066.875:76210): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffc04c5b800 a2=0 a3=100 items=0 ppid=262401 pid=308348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016066.875:76210): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016066.898:76211): table=filter:5 family=10 entries=18 op=nft_register_chain pid=308350 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016066.898:76211): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffdf80fc1f0 a2=0 a3=7ffdf80fc1dc items=0 ppid=262401 pid=308350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016066.898:76211): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016066.899:76212): table=mangle:6 family=10 entries=22 op=nft_register_chain pid=308350 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016066.899:76212): arch=c000003e syscall=46 success=yes exit=3304 a0=3 a1=7ffdf80fc1f0 a2=0 a3=7ffdf80fc1dc items=0 ppid=262401 pid=308350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016066.899:76212): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016066.911:76213): table=raw:7 family=10 entries=9 op=nft_register_chain pid=308350 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016066.911:76213): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffdf80fc1f0 a2=0 a3=100 items=0 ppid=262401 pid=308350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016066.911:76213): proctitle=6970367461626C65732D726573746F7265002D6E
type=USER_ACCT msg=audit(1765016067.220:76214): pid=308367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765016067.220:76215): pid=308367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071646863702D39333265373438392D383839352D343164342D393263362D30643934343530356537653620656E762050524F434553535F5441473D646E736D6173712D39333265373438392D383839352D343164342D393263362D30643934343530356537653620646E736D617371202D2D6E6F2D686F737473202D2D6E6F2D7265736F6C76202D2D7069642D66696C653D2F7661722F6C69622F6E657574726F6E2F646863702F39333265373438392D383839352D343164342D393263362D3064393434353035653765362F706964202D2D646863702D686F73747366696C653D2F7661722F6C69622F6E657574726F6E2F646863702F39333265373438392D383839352D343164342D393263362D3064393434353035653765362F686F7374202D2D6164646E2D686F7374733D2F7661722F6C69622F6E657574726F6E2F646863702F39333265373438392D383839352D343164342D393263362D3064393434353035653765362F6164646E5F686F737473202D2D646863702D6F70747366696C653D2F7661722F6C69622F6E657574726F6E2F646863702F39333265373438392D383839352D343164342D393263362D3064393434353035653765362F6F707473202D2D646863702D6C6561736566696C653D2F7661722F6C69622F6E657574726F6E2F646863702F39333265373438392D383839352D343164342D393263362D3064393434353035653765362F6C6561736573202D2D646863702D6D617463683D7365743A697078652C313735202D2D646863702D75736572636C6173733D7365743A69707865362C69505845202D2D6C6F63616C2D73657276696365202D2D62696E642D64796E616D6963202D2D646863702D72616E67653D7365743A7375626E65742D61643439383432372D306338612D346133312D623830342D6539326233613963393061612C31392E38302E302E302C7374617469632C3235352E3235352E3235352E302C383634303073202D2D646863702D6F7074696F6E2D666F7263653D6F7074696F6E3A6D74752C31343432202D2D646863702D6C656173652D6D61783D323536202D2D636F6E662D66696C653D2F6465762F6E756C6C202D2D646F6D61696E3D6F70656E737461636B6C6F63616C exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765016067.221:76216): pid=308367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765016067.222:76217): pid=308367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016067.703:76218): prog-id=2242 op=LOAD
type=SYSCALL msg=audit(1765016067.703:76218): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffee12d17b0 a2=90 a3=9500000001 items=0 ppid=308406 pid=308407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016067.703:76218): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F383338303965353764616463366630653937663731323432663364386166
type=USER_END msg=audit(1765016067.763:76219): pid=308367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765016067.763:76220): pid=308367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016069.479:76221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016069.614:76222): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016074.476:76223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016074.481:76224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016074.485:76225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016074.640:76226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016074.714:76227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016074.724:76228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016075.991:76229): pid=308602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=308602 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1765016076.089:76230): pid=308603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=308603 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1765016077.159:76231): pid=308604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=308604 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_ACCT msg=audit(1765016079.456:76232): pid=308794 uid=42436 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="nova" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="nova" AUID="unset"
type=USER_CMD msg=audit(1765016079.456:76233): pid=308794 uid=42436 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd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exe="/usr/bin/sudo" terminal=? res=success'UID="nova" AUID="unset"
type=CRED_REFR msg=audit(1765016079.457:76234): pid=308794 uid=42436 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="nova" AUID="unset"
type=USER_START msg=audit(1765016079.458:76235): pid=308794 uid=42436 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="nova" AUID="unset"
type=USER_END msg=audit(1765016080.098:76236): pid=308794 uid=42436 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="nova" AUID="unset"
type=CRED_DISP msg=audit(1765016080.098:76237): pid=308794 uid=42436 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="nova" AUID="unset"
type=SERVICE_START msg=audit(1765016080.477:76238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016080.630:76239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_MACHINE_ID msg=audit(1765016081.150:76240): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000007" uuid=87dc2ce3-2b16-4764-9803-711c2d12c20f vm-ctx=system_u:system_r:svirt_t:s0:c109,c914 img-ctx=system_u:object_r:svirt_image_t:s0:c109,c914 model=selinux exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_MACHINE_ID msg=audit(1765016081.151:76241): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000007" uuid=87dc2ce3-2b16-4764-9803-711c2d12c20f vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016081.166:76242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=virtsecretd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016081.252:76243): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000007" uuid=87dc2ce3-2b16-4764-9803-711c2d12c20f net=fa:16:3e:0e:f5:37 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016081.252:76244): dev=tape87832d3-ff prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016081.252:76244): arch=c000003e syscall=46 success=yes exit=60 a0=34 a1=7fff2bfe50a0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016081.252:76244): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=VIRT_RESOURCE msg=audit(1765016081.297:76245): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000007" uuid=87dc2ce3-2b16-4764-9803-711c2d12c20f net=fa:16:3e:0e:f5:37 path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016081.383:76246): prog-id=2243 op=LOAD
type=SYSCALL msg=audit(1765016081.383:76246): arch=c000003e syscall=321 success=yes exit=27 a0=5 a1=7f0d6691e000 a2=98 a3=7f0d58089e60 items=0 ppid=1 pid=228868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="rpc-virtqemud" exe="/usr/sbin/virtqemud" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016081.383:76246): proctitle=2F7573722F7362696E2F7669727471656D7564002D2D74696D656F757400313230
type=VIRT_RESOURCE msg=audit(1765016081.384:76247): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="instance-00000007" uuid=87dc2ce3-2b16-4764-9803-711c2d12c20f cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d1\x2dinstance\x2d00000007.scope/" class=all exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016081.385:76248): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000007" uuid=87dc2ce3-2b16-4764-9803-711c2d12c20f cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d1\x2dinstance\x2d00000007.scope/" class=path path="/dev/null" rdev=01:03 acl=rw exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016081.385:76249): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000007" uuid=87dc2ce3-2b16-4764-9803-711c2d12c20f cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d1\x2dinstance\x2d00000007.scope/" class=path path="/dev/full" rdev=01:07 acl=rw exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016081.385:76250): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000007" uuid=87dc2ce3-2b16-4764-9803-711c2d12c20f cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d1\x2dinstance\x2d00000007.scope/" class=path path="/dev/zero" rdev=01:05 acl=rw exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016081.385:76251): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000007" uuid=87dc2ce3-2b16-4764-9803-711c2d12c20f cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d1\x2dinstance\x2d00000007.scope/" class=path path="/dev/random" rdev=01:08 acl=rw exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016081.385:76252): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000007" uuid=87dc2ce3-2b16-4764-9803-711c2d12c20f cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d1\x2dinstance\x2d00000007.scope/" class=path path="/dev/urandom" rdev=01:09 acl=rw exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016081.385:76253): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000007" uuid=87dc2ce3-2b16-4764-9803-711c2d12c20f cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d1\x2dinstance\x2d00000007.scope/" class=path path="/dev/ptmx" rdev=05:02 acl=rw exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016081.385:76254): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000007" uuid=87dc2ce3-2b16-4764-9803-711c2d12c20f cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d1\x2dinstance\x2d00000007.scope/" class=path path="/dev/userfaultfd" rdev=0A:7E acl=rw exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016081.385:76255): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000007" uuid=87dc2ce3-2b16-4764-9803-711c2d12c20f cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d1\x2dinstance\x2d00000007.scope/" class=path path="/dev/kvm" rdev=0A:E8 acl=rw exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016081.386:76256): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000007" uuid=87dc2ce3-2b16-4764-9803-711c2d12c20f cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d1\x2dinstance\x2d00000007.scope/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016081.386:76257): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000007" uuid=87dc2ce3-2b16-4764-9803-711c2d12c20f cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d1\x2dinstance\x2d00000007.scope/" class=path path="/dev/urandom" rdev=01:09 acl=rw exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016081.621:76258): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="instance-00000007" uuid=87dc2ce3-2b16-4764-9803-711c2d12c20f old-net="?" new-net="fa:16:3e:0e:f5:37" exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016081.621:76259): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=chardev reason=start vm="instance-00000007" uuid=87dc2ce3-2b16-4764-9803-711c2d12c20f old-chardev="?" new-chardev="/dev/pts/0" exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016081.621:76260): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=rng reason=start vm="instance-00000007" uuid=87dc2ce3-2b16-4764-9803-711c2d12c20f old-rng="?" new-rng="/dev/urandom" exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016081.621:76261): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="instance-00000007" uuid=87dc2ce3-2b16-4764-9803-711c2d12c20f old-mem=0 new-mem=131072 exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016081.621:76262): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="instance-00000007" uuid=87dc2ce3-2b16-4764-9803-711c2d12c20f old-vcpu=0 new-vcpu=1 exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_CONTROL msg=audit(1765016081.621:76263): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="instance-00000007" uuid=87dc2ce3-2b16-4764-9803-711c2d12c20f vm-pid=308977 exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765016081.747:76264): pid=309035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765016081.747:76265): pid=309035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E6620707269767365702D68656C706572202D2D636F6E6669672D66696C65202F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66202D2D636F6E6669672D646972202F6574632F6E657574726F6E2E636F6E662E64202D2D707269767365705F636F6E74657874206E657574726F6E2E70726976696C656765642E6C696E6B5F636D64202D2D707269767365705F736F636B5F70617468202F746D702F746D70716C3931617930712F707269767365702E736F636B exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765016081.748:76266): pid=309035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765016081.750:76267): pid=309035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765016082.338:76268): pid=309035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765016082.339:76269): pid=309035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016083.303:76270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016083.408:76271): dev=tap8a4f3ee4-23 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016083.408:76271): arch=c000003e syscall=46 success=yes exit=60 a0=34 a1=7fff2bfe50a0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016083.408:76271): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=ANOM_PROMISCUOUS msg=audit(1765016083.488:76272): dev=tap47d636a7-c0 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016083.488:76272): arch=c000003e syscall=46 success=yes exit=60 a0=34 a1=7fff2bfe50a0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016083.488:76272): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=SERVICE_STOP msg=audit(1765016083.500:76273): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=NETFILTER_CFG msg=audit(1765016083.511:76274): table=filter:2 family=2 entries=18 op=nft_register_chain pid=309116 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016083.511:76274): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffe1002c010 a2=0 a3=7ffe1002bffc items=0 ppid=262401 pid=309116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016083.511:76274): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016083.511:76275): table=mangle:3 family=2 entries=24 op=nft_register_chain pid=309116 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016083.511:76275): arch=c000003e syscall=46 success=yes exit=3652 a0=3 a1=7ffe1002c010 a2=0 a3=7ffe1002bffc items=0 ppid=262401 pid=309116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016083.511:76275): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016083.519:76276): table=raw:4 family=2 entries=9 op=nft_register_chain pid=309116 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016083.519:76276): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffe1002c010 a2=0 a3=100 items=0 ppid=262401 pid=309116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016083.519:76276): proctitle=69707461626C65732D726573746F7265002D6E
type=USER_ACCT msg=audit(1765016083.519:76277): pid=309117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765016083.519:76278): pid=309117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E732065786563206F766E6D6574612D34376436333661372D633532302D343332302D616139342D62666234316634313835383420656E762050524F434553535F5441473D686170726F78792D34376436333661372D633532302D343332302D616139342D62666234316634313835383420686170726F7879202D66202F7661722F6C69622F6E657574726F6E2F6F766E2D6D657461646174612D70726F78792F34376436333661372D633532302D343332302D616139342D6266623431663431383538342E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765016083.520:76279): pid=309117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765016083.521:76280): pid=309117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=NETFILTER_CFG msg=audit(1765016083.551:76281): table=filter:5 family=10 entries=18 op=nft_register_chain pid=309122 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016083.551:76281): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7fff11213760 a2=0 a3=7fff1121374c items=0 ppid=262401 pid=309122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016083.551:76281): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016083.560:76282): table=mangle:6 family=10 entries=22 op=nft_register_chain pid=309122 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016083.560:76282): arch=c000003e syscall=46 success=yes exit=3304 a0=3 a1=7fff11213760 a2=0 a3=7fff1121374c items=0 ppid=262401 pid=309122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016083.560:76282): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016083.560:76283): table=raw:7 family=10 entries=9 op=nft_register_chain pid=309122 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016083.560:76283): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7fff11213760 a2=0 a3=100 items=0 ppid=262401 pid=309122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016083.560:76283): proctitle=6970367461626C65732D726573746F7265002D6E
type=BPF msg=audit(1765016083.902:76284): prog-id=2244 op=LOAD
type=SYSCALL msg=audit(1765016083.902:76284): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7fffe1738320 a2=90 a3=9500000001 items=0 ppid=309176 pid=309177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016083.902:76284): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F663233646130333665633231643239646262656237316435376237356261
type=USER_END msg=audit(1765016083.979:76285): pid=309117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765016083.980:76286): pid=309117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016084.246:76287): dev=tap932e7489-80 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016084.246:76287): arch=c000003e syscall=46 success=yes exit=60 a0=34 a1=7fff2bfe50a0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016084.246:76287): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=USER_ACCT msg=audit(1765016084.296:76288): pid=309212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765016084.296:76289): pid=309212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E732065786563206F766E6D6574612D39333265373438392D383839352D343164342D393263362D30643934343530356537653620656E762050524F434553535F5441473D686170726F78792D39333265373438392D383839352D343164342D393263362D30643934343530356537653620686170726F7879202D66202F7661722F6C69622F6E657574726F6E2F6F766E2D6D657461646174612D70726F78792F39333265373438392D383839352D343164342D393263362D3064393434353035653765362E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765016084.296:76290): pid=309212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765016084.297:76291): pid=309212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765016084.340:76292): pid=309215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765016084.340:76293): pid=309215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd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exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765016084.341:76294): pid=309215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765016084.343:76295): pid=309215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016084.788:76296): prog-id=2245 op=LOAD
type=SYSCALL msg=audit(1765016084.788:76296): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7fffd68f11c0 a2=90 a3=9500000001 items=0 ppid=309288 pid=309289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016084.788:76296): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F623137393335313364656237303965323864363834353661643936383965
type=SERVICE_START msg=audit(1765016084.871:76297): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765016084.872:76298): pid=309212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765016084.872:76299): pid=309212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016084.874:76300): prog-id=2246 op=LOAD
type=SYSCALL msg=audit(1765016084.874:76300): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffff0b98010 a2=90 a3=9500000001 items=0 ppid=309292 pid=309293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016084.874:76300): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F366161366561396536643664633865366236616636333563306539616466
type=USER_END msg=audit(1765016084.955:76301): pid=309215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765016084.955:76302): pid=309215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016085.011:76303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765016092.538:76304): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016092.538:76305): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016092.541:76306): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=309407 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016092.614:76307): pid=309407 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016092.615:76308): pid=309407 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016092.616:76309): pid=309407 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016092.621:76310): pid=309407 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016092.624:76311): pid=309407 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016092.625:76312): pid=309407 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016092.633:76313): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016092.633:76314): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765016092.643:76315): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016092.643:76316): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016092.644:76317): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=309425 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016092.710:76318): pid=309425 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016092.710:76319): pid=309425 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016092.711:76320): pid=309425 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016092.714:76321): pid=309425 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016093.403:76322): pid=309425 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016093.404:76323): pid=309425 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016093.519:76324): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016093.519:76325): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765016093.787:76326): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016093.787:76327): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016093.788:76328): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=309475 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016093.830:76329): pid=309475 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016093.830:76330): pid=309475 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016093.831:76331): pid=309475 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016093.834:76332): pid=309475 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016093.836:76333): pid=309475 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016093.836:76334): pid=309475 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016093.838:76335): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016093.838:76336): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=ANOM_PROMISCUOUS msg=audit(1765016099.040:76337): dev=tape87832d3-ff prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295AUID="unset" UID="qemu" GID="qemu"
type=BPF msg=audit(1765016099.202:76338): prog-id=0 op=UNLOAD
type=VIRT_CONTROL msg=audit(1765016099.204:76339): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=migrated vm="instance-00000007" uuid=87dc2ce3-2b16-4764-9803-711c2d12c20f vm-pid=0 exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016099.310:76340): prog-id=0 op=UNLOAD
type=ANOM_PROMISCUOUS msg=audit(1765016099.437:76341): dev=tap47d636a7-c0 prom=0 old_prom=256 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016099.437:76341): arch=c000003e syscall=46 success=yes exit=32 a0=34 a1=7fff2bfe52b0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016099.437:76341): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=BPF msg=audit(1765016099.699:76342): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765016099.700:76343): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016099.833:76344): dev=tap932e7489-80 prom=0 old_prom=256 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016099.833:76344): arch=c000003e syscall=46 success=yes exit=32 a0=34 a1=7fff2bfe52b0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016099.833:76344): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=SERVICE_STOP msg=audit(1765016099.925:76345): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016099.963:76346): dev=tap1766b235-0b prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016099.963:76346): arch=c000003e syscall=46 success=yes exit=60 a0=34 a1=7fff2bfe50a0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016099.963:76346): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=NETFILTER_CFG msg=audit(1765016100.091:76347): table=filter:2 family=2 entries=18 op=nft_register_chain pid=309687 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016100.091:76347): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7fffae7ebb50 a2=0 a3=7fffae7ebb3c items=0 ppid=262401 pid=309687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016100.091:76347): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016100.092:76348): table=mangle:3 family=2 entries=24 op=nft_register_chain pid=309687 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016100.092:76348): arch=c000003e syscall=46 success=yes exit=3652 a0=3 a1=7fffae7ebb50 a2=0 a3=7fffae7ebb3c items=0 ppid=262401 pid=309687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016100.092:76348): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016100.106:76349): table=raw:4 family=2 entries=9 op=nft_register_chain pid=309687 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016100.106:76349): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7fffae7ebb50 a2=0 a3=100 items=0 ppid=262401 pid=309687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016100.106:76349): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016100.152:76350): table=filter:5 family=10 entries=18 op=nft_register_chain pid=309689 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016100.152:76350): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffe474672a0 a2=0 a3=7ffe4746728c items=0 ppid=262401 pid=309689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016100.152:76350): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016100.153:76351): table=mangle:6 family=10 entries=22 op=nft_register_chain pid=309689 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016100.153:76351): arch=c000003e syscall=46 success=yes exit=3304 a0=3 a1=7ffe474672a0 a2=0 a3=7ffe4746728c items=0 ppid=262401 pid=309689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016100.153:76351): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016100.167:76352): table=raw:7 family=10 entries=9 op=nft_register_chain pid=309689 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016100.167:76352): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffe474672a0 a2=0 a3=100 items=0 ppid=262401 pid=309689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016100.167:76352): proctitle=6970367461626C65732D726573746F7265002D6E
type=USER_ACCT msg=audit(1765016100.512:76353): pid=309706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765016100.512:76354): pid=309706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd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exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765016100.512:76355): pid=309706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765016100.514:76356): pid=309706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016100.981:76357): prog-id=2247 op=LOAD
type=SYSCALL msg=audit(1765016100.981:76357): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7fffcb2f0130 a2=90 a3=9500000001 items=0 ppid=309745 pid=309746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016100.981:76357): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F376239626235386136333331363734343935653566396633643430386363
type=USER_END msg=audit(1765016101.057:76358): pid=309706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765016101.057:76359): pid=309706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016105.476:76360): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016105.480:76361): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016105.484:76362): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016105.652:76363): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016105.720:76364): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016105.730:76365): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016111.476:76366): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016111.601:76367): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016114.476:76368): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016114.638:76369): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016115.476:76370): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016115.612:76371): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_MACHINE_ID msg=audit(1765016118.801:76372): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000008" uuid=ed40901b-0bfc-426a-bf70-48d87ce95aa6 vm-ctx=system_u:system_r:svirt_t:s0:c408,c924 img-ctx=system_u:object_r:svirt_image_t:s0:c408,c924 model=selinux exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_MACHINE_ID msg=audit(1765016118.801:76373): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000008" uuid=ed40901b-0bfc-426a-bf70-48d87ce95aa6 vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016118.834:76374): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000008" uuid=ed40901b-0bfc-426a-bf70-48d87ce95aa6 net=fa:16:3e:e5:ea:4a path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016118.834:76375): dev=tapfeb6a13d-30 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016118.834:76375): arch=c000003e syscall=46 success=yes exit=60 a0=34 a1=7fff2bfe50a0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016118.834:76375): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=VIRT_RESOURCE msg=audit(1765016118.835:76376): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000008" uuid=ed40901b-0bfc-426a-bf70-48d87ce95aa6 net=fa:16:3e:e5:ea:4a path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016118.901:76377): prog-id=2248 op=LOAD
type=SYSCALL msg=audit(1765016118.901:76377): arch=c000003e syscall=321 success=yes exit=27 a0=5 a1=7f0d6711f000 a2=98 a3=3 items=0 ppid=1 pid=228868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="rpc-virtqemud" exe="/usr/sbin/virtqemud" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016118.901:76377): proctitle=2F7573722F7362696E2F7669727471656D7564002D2D74696D656F757400313230
type=VIRT_RESOURCE msg=audit(1765016118.902:76378): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="instance-00000008" uuid=ed40901b-0bfc-426a-bf70-48d87ce95aa6 cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d2\x2dinstance\x2d00000008.scope/" class=all exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016118.903:76379): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000008" uuid=ed40901b-0bfc-426a-bf70-48d87ce95aa6 cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d2\x2dinstance\x2d00000008.scope/" class=path path="/dev/null" rdev=01:03 acl=rw exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016118.903:76380): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000008" uuid=ed40901b-0bfc-426a-bf70-48d87ce95aa6 cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d2\x2dinstance\x2d00000008.scope/" class=path path="/dev/full" rdev=01:07 acl=rw exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016118.903:76381): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000008" uuid=ed40901b-0bfc-426a-bf70-48d87ce95aa6 cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d2\x2dinstance\x2d00000008.scope/" class=path path="/dev/zero" rdev=01:05 acl=rw exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016118.903:76382): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000008" uuid=ed40901b-0bfc-426a-bf70-48d87ce95aa6 cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d2\x2dinstance\x2d00000008.scope/" class=path path="/dev/random" rdev=01:08 acl=rw exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016118.903:76383): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000008" uuid=ed40901b-0bfc-426a-bf70-48d87ce95aa6 cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d2\x2dinstance\x2d00000008.scope/" class=path path="/dev/urandom" rdev=01:09 acl=rw exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016118.903:76384): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000008" uuid=ed40901b-0bfc-426a-bf70-48d87ce95aa6 cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d2\x2dinstance\x2d00000008.scope/" class=path path="/dev/ptmx" rdev=05:02 acl=rw exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016118.903:76385): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000008" uuid=ed40901b-0bfc-426a-bf70-48d87ce95aa6 cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d2\x2dinstance\x2d00000008.scope/" class=path path="/dev/userfaultfd" rdev=0A:7E acl=rw exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016118.903:76386): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000008" uuid=ed40901b-0bfc-426a-bf70-48d87ce95aa6 cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d2\x2dinstance\x2d00000008.scope/" class=path path="/dev/kvm" rdev=0A:E8 acl=rw exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016118.903:76387): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000008" uuid=ed40901b-0bfc-426a-bf70-48d87ce95aa6 cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d2\x2dinstance\x2d00000008.scope/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016118.903:76388): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000008" uuid=ed40901b-0bfc-426a-bf70-48d87ce95aa6 cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d2\x2dinstance\x2d00000008.scope/" class=path path="/dev/urandom" rdev=01:09 acl=rw exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016119.112:76389): dev=tap19043ea6-c0 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016119.112:76389): arch=c000003e syscall=46 success=yes exit=60 a0=15 a1=7fff2bfe50a0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016119.112:76389): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=USER_ACCT msg=audit(1765016119.136:76390): pid=310618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765016119.136:76391): pid=310618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E732065786563206F766E6D6574612D31393034336561362D633662322D343237322D616136302D31623131613762356264393320656E762050524F434553535F5441473D686170726F78792D31393034336561362D633662322D343237322D616136302D31623131613762356264393320686170726F7879202D66202F7661722F6C69622F6E657574726F6E2F6F766E2D6D657461646174612D70726F78792F31393034336561362D633662322D343237322D616136302D3162313161376235626439332E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765016119.137:76392): pid=310618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765016119.138:76393): pid=310618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016119.168:76394): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="instance-00000008" uuid=ed40901b-0bfc-426a-bf70-48d87ce95aa6 old-net="?" new-net="fa:16:3e:e5:ea:4a" exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016119.168:76395): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=chardev reason=start vm="instance-00000008" uuid=ed40901b-0bfc-426a-bf70-48d87ce95aa6 old-chardev="?" new-chardev="/dev/pts/0" exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016119.168:76396): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=rng reason=start vm="instance-00000008" uuid=ed40901b-0bfc-426a-bf70-48d87ce95aa6 old-rng="?" new-rng="/dev/urandom" exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016119.168:76397): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="instance-00000008" uuid=ed40901b-0bfc-426a-bf70-48d87ce95aa6 old-mem=0 new-mem=131072 exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016119.168:76398): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="instance-00000008" uuid=ed40901b-0bfc-426a-bf70-48d87ce95aa6 old-vcpu=0 new-vcpu=1 exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_CONTROL msg=audit(1765016119.168:76399): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="instance-00000008" uuid=ed40901b-0bfc-426a-bf70-48d87ce95aa6 vm-pid=310516 exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016119.570:76400): prog-id=2249 op=LOAD
type=SYSCALL msg=audit(1765016119.570:76400): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7fff031e93a0 a2=90 a3=9500000001 items=0 ppid=310696 pid=310697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016119.570:76400): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F626232353362366265343033383432336437633930303139613137396432
type=USER_END msg=audit(1765016119.648:76401): pid=310618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765016119.649:76402): pid=310618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016119.888:76403): dev=tap45604602-b0 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016119.888:76403): arch=c000003e syscall=46 success=yes exit=60 a0=15 a1=7fff2bfe50a0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016119.888:76403): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=USER_ACCT msg=audit(1765016119.921:76404): pid=310751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765016119.921:76405): pid=310751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E732065786563206F766E6D6574612D34353630343630322D626338372D343630382D393838312D39353638636266393038373020656E762050524F434553535F5441473D686170726F78792D34353630343630322D626338372D343630382D393838312D39353638636266393038373020686170726F7879202D66202F7661722F6C69622F6E657574726F6E2F6F766E2D6D657461646174612D70726F78792F34353630343630322D626338372D343630382D393838312D3935363863626639303837302E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765016119.921:76406): pid=310751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765016119.922:76407): pid=310751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_MACHINE_ID msg=audit(1765016120.267:76408): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000006" uuid=3d34a856-7613-4158-b859-fb3089fe3bc7 vm-ctx=system_u:system_r:svirt_t:s0:c726,c832 img-ctx=system_u:object_r:svirt_image_t:s0:c726,c832 model=selinux exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_MACHINE_ID msg=audit(1765016120.267:76409): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000006" uuid=3d34a856-7613-4158-b859-fb3089fe3bc7 vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016120.335:76410): prog-id=2250 op=LOAD
type=SYSCALL msg=audit(1765016120.335:76410): arch=c000003e syscall=321 success=yes exit=31 a0=5 a1=7f0d6591c000 a2=98 a3=3 items=0 ppid=1 pid=228868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="rpc-virtqemud" exe="/usr/sbin/virtqemud" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016120.335:76410): proctitle=2F7573722F7362696E2F7669727471656D7564002D2D74696D656F757400313230
type=VIRT_RESOURCE msg=audit(1765016120.336:76411): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="instance-00000006" uuid=3d34a856-7613-4158-b859-fb3089fe3bc7 cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d3\x2dinstance\x2d00000006.scope/" class=all exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016120.336:76412): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000006" uuid=3d34a856-7613-4158-b859-fb3089fe3bc7 cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d3\x2dinstance\x2d00000006.scope/" class=path path="/dev/null" rdev=01:03 acl=rw exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016120.336:76413): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000006" uuid=3d34a856-7613-4158-b859-fb3089fe3bc7 cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d3\x2dinstance\x2d00000006.scope/" class=path path="/dev/full" rdev=01:07 acl=rw exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016120.336:76414): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000006" uuid=3d34a856-7613-4158-b859-fb3089fe3bc7 cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d3\x2dinstance\x2d00000006.scope/" class=path path="/dev/zero" rdev=01:05 acl=rw exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016120.336:76415): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000006" uuid=3d34a856-7613-4158-b859-fb3089fe3bc7 cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d3\x2dinstance\x2d00000006.scope/" class=path path="/dev/random" rdev=01:08 acl=rw exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016120.336:76416): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000006" uuid=3d34a856-7613-4158-b859-fb3089fe3bc7 cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d3\x2dinstance\x2d00000006.scope/" class=path path="/dev/urandom" rdev=01:09 acl=rw exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016120.336:76417): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000006" uuid=3d34a856-7613-4158-b859-fb3089fe3bc7 cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d3\x2dinstance\x2d00000006.scope/" class=path path="/dev/ptmx" rdev=05:02 acl=rw exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016120.336:76418): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000006" uuid=3d34a856-7613-4158-b859-fb3089fe3bc7 cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d3\x2dinstance\x2d00000006.scope/" class=path path="/dev/userfaultfd" rdev=0A:7E acl=rw exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016120.336:76419): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000006" uuid=3d34a856-7613-4158-b859-fb3089fe3bc7 cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d3\x2dinstance\x2d00000006.scope/" class=path path="/dev/kvm" rdev=0A:E8 acl=rw exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016120.336:76420): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000006" uuid=3d34a856-7613-4158-b859-fb3089fe3bc7 cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d3\x2dinstance\x2d00000006.scope/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016120.336:76421): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000006" uuid=3d34a856-7613-4158-b859-fb3089fe3bc7 cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d3\x2dinstance\x2d00000006.scope/" class=path path="/dev/urandom" rdev=01:09 acl=rw exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016120.399:76422): prog-id=2251 op=LOAD
type=SYSCALL msg=audit(1765016120.399:76422): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffd716fd5f0 a2=90 a3=9500000001 items=0 ppid=310845 pid=310846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016120.399:76422): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F623033663239633864303336633136343131653265623835323961336235
type=USER_END msg=audit(1765016120.462:76423): pid=310751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765016120.462:76424): pid=310751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016120.559:76425): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=chardev reason=start vm="instance-00000006" uuid=3d34a856-7613-4158-b859-fb3089fe3bc7 old-chardev="?" new-chardev="/dev/pts/1" exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016120.559:76426): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=rng reason=start vm="instance-00000006" uuid=3d34a856-7613-4158-b859-fb3089fe3bc7 old-rng="?" new-rng="/dev/urandom" exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016120.559:76427): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="instance-00000006" uuid=3d34a856-7613-4158-b859-fb3089fe3bc7 old-mem=0 new-mem=131072 exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016120.559:76428): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="instance-00000006" uuid=3d34a856-7613-4158-b859-fb3089fe3bc7 old-vcpu=0 new-vcpu=1 exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_CONTROL msg=audit(1765016120.559:76429): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="instance-00000006" uuid=3d34a856-7613-4158-b859-fb3089fe3bc7 vm-pid=310834 exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016120.670:76430): pid=310903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=310903 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765016120.698:76431): pid=310902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=310903 suid=74 rport=37288 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=3.137.73.221 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765016120.699:76432): pid=310902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=310903 suid=74 rport=37288 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=3.137.73.221 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1765016123.007:76433): prog-id=0 op=UNLOAD
type=VIRT_CONTROL msg=audit(1765016123.008:76434): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="instance-00000006" uuid=3d34a856-7613-4158-b859-fb3089fe3bc7 vm-pid=0 exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016127.759:76435): prog-id=0 op=UNLOAD
type=ANOM_PROMISCUOUS msg=audit(1765016127.955:76436): dev=tap90d179d9-70 prom=0 old_prom=256 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016127.955:76436): arch=c000003e syscall=46 success=yes exit=32 a0=15 a1=7fff2bfe52b0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016127.955:76436): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=SERVICE_START msg=audit(1765016130.478:76437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016130.643:76438): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016130.648:76439): pid=310902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=310903 suid=74 rport=37288 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=3.137.73.221 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016130.649:76440): pid=310902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=310903 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016130.650:76441): pid=310902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=310902 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765016130.650:76442): pid=310902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=3.137.73.221 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016136.213:76443): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016136.218:76444): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016136.222:76445): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016136.238:76446): dev=tapfeb6a13d-30 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295AUID="unset" UID="qemu" GID="qemu"
type=SERVICE_STOP msg=audit(1765016136.411:76447): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016136.418:76448): prog-id=0 op=UNLOAD
type=VIRT_CONTROL msg=audit(1765016136.419:76449): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=migrated vm="instance-00000008" uuid=ed40901b-0bfc-426a-bf70-48d87ce95aa6 vm-pid=0 exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016136.458:76450): prog-id=0 op=UNLOAD
type=ANOM_PROMISCUOUS msg=audit(1765016136.592:76451): dev=tap19043ea6-c0 prom=0 old_prom=256 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016136.592:76451): arch=c000003e syscall=46 success=yes exit=32 a0=15 a1=7fff2bfe52b0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016136.592:76451): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=SERVICE_STOP msg=audit(1765016136.593:76452): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016136.595:76453): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016136.835:76454): prog-id=0 op=UNLOAD
type=ANOM_PROMISCUOUS msg=audit(1765016136.967:76455): dev=tap45604602-b0 prom=0 old_prom=256 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016136.967:76455): arch=c000003e syscall=46 success=yes exit=32 a0=15 a1=7fff2bfe52b0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016136.967:76455): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=ANOM_PROMISCUOUS msg=audit(1765016138.592:76456): dev=tap949736e1-2a prom=0 old_prom=256 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016138.592:76456): arch=c000003e syscall=46 success=yes exit=32 a0=15 a1=7fff2bfe52b0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016138.592:76456): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=SERVICE_START msg=audit(1765016142.014:76457): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016142.020:76458): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1765016142.233:76459): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016145.474:76460): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016145.961:76461): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016145.980:76462): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016146.151:76463): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765016153.857:76464): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016153.857:76465): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016153.859:76466): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=311536 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016153.926:76467): pid=311536 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016153.926:76468): pid=311536 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016153.928:76469): pid=311536 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016153.933:76470): pid=311536 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016153.935:76471): pid=311536 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016153.935:76472): pid=311536 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016153.939:76473): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016153.940:76474): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765016153.944:76475): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016153.944:76476): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016153.945:76477): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=311554 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016154.004:76478): pid=311554 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016154.004:76479): pid=311554 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016154.004:76480): pid=311554 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016154.007:76481): pid=311554 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016154.644:76482): pid=311554 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016154.645:76483): pid=311554 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016154.759:76484): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016154.759:76485): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765016154.998:76486): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016154.998:76487): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016154.999:76488): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=311603 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016155.062:76489): pid=311603 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016155.062:76490): pid=311603 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016155.063:76491): pid=311603 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016155.066:76492): pid=311603 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016155.070:76493): pid=311603 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016155.070:76494): pid=311603 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016155.075:76495): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016155.075:76496): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=BPF msg=audit(1765016158.689:76497): prog-id=0 op=UNLOAD
type=ANOM_PROMISCUOUS msg=audit(1765016158.826:76498): dev=tap1766b235-0b prom=0 old_prom=256 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016158.826:76498): arch=c000003e syscall=46 success=yes exit=32 a0=15 a1=7fff2bfe52b0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016158.826:76498): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=SERVICE_START msg=audit(1765016161.475:76499): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016161.597:76500): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016166.478:76501): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016166.605:76502): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016166.630:76503): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016166.634:76504): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016166.792:76505): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016166.852:76506): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016172.477:76507): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016172.606:76508): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016173.016:76509): dev=tap8a4f3ee4-23 prom=0 old_prom=256 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016173.016:76509): arch=c000003e syscall=46 success=yes exit=32 a0=15 a1=7fff2bfe52b0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016173.016:76509): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=SERVICE_START msg=audit(1765016176.216:76510): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016176.219:76511): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016176.243:76512): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1765016176.392:76513): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016176.445:76514): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016192.475:76515): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016192.614:76516): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016194.020:76517): pid=311981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=311981 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765016194.958:76518): pid=311980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=311981 suid=74 rport=33740 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765016194.958:76519): pid=311980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=311981 suid=74 rport=33740 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1765016197.486:76520): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016197.490:76521): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016197.494:76522): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016197.613:76523): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016197.709:76524): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016197.738:76525): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016200.006:76526): pid=311980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=311981 suid=74 rport=33740 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016200.006:76527): pid=311980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=311981 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016200.007:76528): pid=311980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=311980 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765016200.007:76529): pid=311980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016203.475:76530): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016203.628:76531): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016206.474:76532): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016206.478:76533): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016206.590:76534): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016206.700:76535): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016214.729:76536): dev=tapc290d0b6-ee prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016214.729:76536): arch=c000003e syscall=46 success=yes exit=60 a0=15 a1=7fff2bfe50a0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016214.729:76536): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=NETFILTER_CFG msg=audit(1765016214.850:76537): table=filter:2 family=2 entries=18 op=nft_register_chain pid=312193 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016214.850:76537): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffc6b7a8d70 a2=0 a3=7ffc6b7a8d5c items=0 ppid=262401 pid=312193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016214.850:76537): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016214.851:76538): table=mangle:3 family=2 entries=24 op=nft_register_chain pid=312193 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016214.851:76538): arch=c000003e syscall=46 success=yes exit=3652 a0=3 a1=7ffc6b7a8d70 a2=0 a3=7ffc6b7a8d5c items=0 ppid=262401 pid=312193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016214.851:76538): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016214.863:76539): table=raw:4 family=2 entries=9 op=nft_register_chain pid=312193 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016214.863:76539): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffc6b7a8d70 a2=0 a3=100 items=0 ppid=262401 pid=312193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016214.863:76539): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016214.902:76540): table=filter:5 family=10 entries=18 op=nft_register_chain pid=312195 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016214.902:76540): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffd11fa4380 a2=0 a3=7ffd11fa436c items=0 ppid=262401 pid=312195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016214.902:76540): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016214.903:76541): table=mangle:6 family=10 entries=22 op=nft_register_chain pid=312195 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016214.903:76541): arch=c000003e syscall=46 success=yes exit=3304 a0=3 a1=7ffd11fa4380 a2=0 a3=7ffd11fa436c items=0 ppid=262401 pid=312195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016214.903:76541): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016214.914:76542): table=raw:7 family=10 entries=9 op=nft_register_chain pid=312195 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016214.914:76542): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffd11fa4380 a2=0 a3=100 items=0 ppid=262401 pid=312195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016214.914:76542): proctitle=6970367461626C65732D726573746F7265002D6E
type=USER_LOGIN msg=audit(1765016215.091:76543): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016215.091:76544): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016215.093:76545): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=312206 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016215.166:76546): pid=312206 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016215.166:76547): pid=312206 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016215.168:76548): pid=312206 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016215.174:76549): pid=312206 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016215.176:76550): pid=312206 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016215.177:76551): pid=312206 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016215.182:76552): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016215.182:76553): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765016215.188:76554): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016215.188:76555): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016215.190:76556): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=312229 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016215.249:76557): pid=312229 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016215.250:76558): pid=312229 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016215.250:76559): pid=312229 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016215.253:76560): pid=312229 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_ACCT msg=audit(1765016215.456:76561): pid=312248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765016215.456:76562): pid=312248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd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exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765016215.456:76563): pid=312248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765016215.457:76564): pid=312248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016215.916:76565): prog-id=2252 op=LOAD
type=SYSCALL msg=audit(1765016215.916:76565): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7fffa296c220 a2=90 a3=9500000001 items=0 ppid=312317 pid=312318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016215.916:76565): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F303739656465663065336632316138306239363733376164376233663736
type=USER_END msg=audit(1765016215.921:76566): pid=312229 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016215.922:76567): pid=312229 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016215.973:76568): pid=312248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765016215.973:76569): pid=312248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765016216.000:76570): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016216.000:76571): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765016216.243:76572): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016216.243:76573): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016216.245:76574): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=312322 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016216.308:76575): pid=312322 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016216.308:76576): pid=312322 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016216.309:76577): pid=312322 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016216.314:76578): pid=312322 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016216.317:76579): pid=312322 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016216.317:76580): pid=312322 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016216.322:76581): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016216.322:76582): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=ANOM_PROMISCUOUS msg=audit(1765016217.379:76583): dev=tap3780d604-8f prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016217.379:76583): arch=c000003e syscall=46 success=yes exit=60 a0=15 a1=7fff2bfe50a0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016217.379:76583): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=NETFILTER_CFG msg=audit(1765016217.513:76584): table=filter:2 family=2 entries=18 op=nft_register_chain pid=312375 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016217.513:76584): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7fff6b8de5c0 a2=0 a3=7fff6b8de5ac items=0 ppid=262401 pid=312375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016217.513:76584): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016217.515:76585): table=mangle:3 family=2 entries=24 op=nft_register_chain pid=312375 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016217.515:76585): arch=c000003e syscall=46 success=yes exit=3652 a0=3 a1=7fff6b8de5c0 a2=0 a3=7fff6b8de5ac items=0 ppid=262401 pid=312375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016217.515:76585): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016217.525:76586): table=raw:4 family=2 entries=9 op=nft_register_chain pid=312375 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016217.525:76586): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7fff6b8de5c0 a2=0 a3=100 items=0 ppid=262401 pid=312375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016217.525:76586): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016217.564:76587): table=filter:5 family=10 entries=18 op=nft_register_chain pid=312377 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016217.564:76587): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffc58a32600 a2=0 a3=7ffc58a325ec items=0 ppid=262401 pid=312377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016217.564:76587): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016217.565:76588): table=mangle:6 family=10 entries=22 op=nft_register_chain pid=312377 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016217.565:76588): arch=c000003e syscall=46 success=yes exit=3304 a0=3 a1=7ffc58a32600 a2=0 a3=7ffc58a325ec items=0 ppid=262401 pid=312377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016217.565:76588): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016217.576:76589): table=raw:7 family=10 entries=9 op=nft_register_chain pid=312377 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016217.576:76589): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffc58a32600 a2=0 a3=100 items=0 ppid=262401 pid=312377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016217.576:76589): proctitle=6970367461626C65732D726573746F7265002D6E
type=USER_ACCT msg=audit(1765016217.935:76590): pid=312394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765016217.935:76591): pid=312394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd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exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765016217.936:76592): pid=312394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765016217.937:76593): pid=312394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016218.346:76594): prog-id=2253 op=LOAD
type=SYSCALL msg=audit(1765016218.346:76594): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffccf9a9540 a2=90 a3=9500000001 items=0 ppid=312435 pid=312436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016218.346:76594): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F633337323638336433613166346639633864326536643763343837323564
type=USER_END msg=audit(1765016218.419:76595): pid=312394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765016218.419:76596): pid=312394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016223.484:76597): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016223.596:76598): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016226.457:76599): pid=312494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=312494 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765016226.731:76600): pid=312492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=312494 suid=74 rport=56108 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=43.163.93.82 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765016226.732:76601): pid=312492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=312494 suid=74 rport=56108 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=43.163.93.82 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1765016228.184:76602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016228.188:76603): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016228.191:76604): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016228.360:76605): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016228.397:76606): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016228.410:76607): pid=312492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=312494 suid=74 rport=56108 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=43.163.93.82 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016228.411:76608): pid=312492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=312494 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765016228.411:76609): pid=312492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=43.163.93.82 addr=43.163.93.82 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016228.412:76610): pid=312492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=312492 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765016228.412:76611): pid=312492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=43.163.93.82 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016228.455:76612): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016234.479:76613): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016234.622:76614): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016236.854:76615): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765016236.855:76616): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016236.859:76617): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016237.040:76618): dev=tapc290d0b6-ee prom=0 old_prom=256 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016237.040:76618): arch=c000003e syscall=46 success=yes exit=32 a0=15 a1=7fff2bfe52b0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016237.040:76618): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=SERVICE_STOP msg=audit(1765016237.099:76619): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016237.179:76620): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016240.304:76621): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=virtsecretd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016244.886:76622): dev=tap3780d604-8f prom=0 old_prom=256 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016244.886:76622): arch=c000003e syscall=46 success=yes exit=32 a0=15 a1=7fff2bfe52b0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016244.886:76622): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=BPF msg=audit(1765016246.933:76623): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765016254.476:76624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016254.612:76625): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016258.475:76626): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016258.479:76627): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016258.482:76628): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016258.656:76629): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016258.683:76630): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016258.759:76631): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016265.479:76632): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016265.634:76633): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016267.478:76634): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016267.482:76635): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016267.595:76636): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016267.731:76637): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765016276.339:76638): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016276.339:76639): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016276.341:76640): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=313022 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016276.394:76641): pid=313022 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016276.394:76642): pid=313022 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016276.396:76643): pid=313022 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016276.401:76644): pid=313022 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016276.403:76645): pid=313022 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016276.403:76646): pid=313022 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016276.406:76647): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016276.407:76648): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765016276.408:76649): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016276.409:76650): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016276.410:76651): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=313040 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016276.471:76652): pid=313040 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016276.471:76653): pid=313040 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016276.472:76654): pid=313040 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016276.475:76655): pid=313040 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016277.091:76656): pid=313040 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016277.092:76657): pid=313040 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016277.152:76658): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016277.152:76659): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765016277.545:76660): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016277.545:76661): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016277.546:76662): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=313091 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016277.607:76663): pid=313091 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016277.607:76664): pid=313091 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016277.608:76665): pid=313091 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016277.611:76666): pid=313091 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016277.613:76667): pid=313091 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016277.614:76668): pid=313091 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016277.618:76669): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016277.618:76670): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=ANOM_PROMISCUOUS msg=audit(1765016279.157:76671): dev=tapf608362e-e1 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016279.157:76671): arch=c000003e syscall=46 success=yes exit=60 a0=15 a1=7fff2bfe50a0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016279.157:76671): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=NETFILTER_CFG msg=audit(1765016279.286:76672): table=filter:2 family=2 entries=18 op=nft_register_chain pid=313146 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016279.286:76672): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffe30304d70 a2=0 a3=7ffe30304d5c items=0 ppid=262401 pid=313146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016279.286:76672): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016279.287:76673): table=mangle:3 family=2 entries=24 op=nft_register_chain pid=313146 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016279.287:76673): arch=c000003e syscall=46 success=yes exit=3652 a0=3 a1=7ffe30304d70 a2=0 a3=7ffe30304d5c items=0 ppid=262401 pid=313146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016279.287:76673): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016279.303:76674): table=raw:4 family=2 entries=9 op=nft_register_chain pid=313146 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016279.303:76674): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffe30304d70 a2=0 a3=100 items=0 ppid=262401 pid=313146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016279.303:76674): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016279.338:76675): table=filter:5 family=10 entries=18 op=nft_register_chain pid=313148 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016279.338:76675): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffc2059a720 a2=0 a3=7ffc2059a70c items=0 ppid=262401 pid=313148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016279.338:76675): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016279.339:76676): table=mangle:6 family=10 entries=22 op=nft_register_chain pid=313148 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016279.339:76676): arch=c000003e syscall=46 success=yes exit=3304 a0=3 a1=7ffc2059a720 a2=0 a3=7ffc2059a70c items=0 ppid=262401 pid=313148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016279.339:76676): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016279.347:76677): table=raw:7 family=10 entries=9 op=nft_register_chain pid=313148 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016279.347:76677): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffc2059a720 a2=0 a3=100 items=0 ppid=262401 pid=313148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016279.347:76677): proctitle=6970367461626C65732D726573746F7265002D6E
type=USER_ACCT msg=audit(1765016279.696:76678): pid=313165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765016279.696:76679): pid=313165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd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exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765016279.697:76680): pid=313165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765016279.699:76681): pid=313165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016280.207:76682): prog-id=2254 op=LOAD
type=SYSCALL msg=audit(1765016280.207:76682): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffc04a80bb0 a2=90 a3=9500000001 items=0 ppid=313204 pid=313205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016280.207:76682): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F366638633730333463626639623862623739396535326632333534636539
type=USER_END msg=audit(1765016280.290:76683): pid=313165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765016280.291:76684): pid=313165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016285.479:76685): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016285.625:76686): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016289.055:76687): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016289.059:76688): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016289.063:76689): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016289.154:76690): dev=tapf29906d1-35 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016289.154:76690): arch=c000003e syscall=46 success=yes exit=60 a0=15 a1=7fff2bfe50a0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016289.154:76690): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=SERVICE_STOP msg=audit(1765016289.242:76691): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016289.288:76692): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=NETFILTER_CFG msg=audit(1765016289.289:76693): table=filter:2 family=2 entries=18 op=nft_register_chain pid=313384 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016289.289:76693): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7fff603e1310 a2=0 a3=7fff603e12fc items=0 ppid=262401 pid=313384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016289.289:76693): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016289.290:76694): table=mangle:3 family=2 entries=24 op=nft_register_chain pid=313384 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016289.290:76694): arch=c000003e syscall=46 success=yes exit=3652 a0=3 a1=7fff603e1310 a2=0 a3=7fff603e12fc items=0 ppid=262401 pid=313384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016289.290:76694): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016289.302:76695): table=raw:4 family=2 entries=9 op=nft_register_chain pid=313384 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016289.302:76695): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7fff603e1310 a2=0 a3=100 items=0 ppid=262401 pid=313384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016289.302:76695): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016289.337:76696): table=filter:5 family=10 entries=18 op=nft_register_chain pid=313386 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016289.337:76696): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffdb4b94dd0 a2=0 a3=7ffdb4b94dbc items=0 ppid=262401 pid=313386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016289.337:76696): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016289.337:76697): table=mangle:6 family=10 entries=22 op=nft_register_chain pid=313386 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016289.337:76697): arch=c000003e syscall=46 success=yes exit=3304 a0=3 a1=7ffdb4b94dd0 a2=0 a3=7ffdb4b94dbc items=0 ppid=262401 pid=313386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016289.337:76697): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016289.356:76698): table=raw:7 family=10 entries=9 op=nft_register_chain pid=313386 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016289.356:76698): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffdb4b94dd0 a2=0 a3=100 items=0 ppid=262401 pid=313386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016289.356:76698): proctitle=6970367461626C65732D726573746F7265002D6E
type=SERVICE_STOP msg=audit(1765016289.369:76699): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765016289.642:76700): pid=313403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765016289.642:76701): pid=313403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd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exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765016289.643:76702): pid=313403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765016289.646:76703): pid=313403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016290.097:76704): prog-id=2255 op=LOAD
type=SYSCALL msg=audit(1765016290.097:76704): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffc9bc1e920 a2=90 a3=9500000001 items=0 ppid=313442 pid=313443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016290.097:76704): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F306433303038326664346630353032636562346466393464626535383836
type=USER_END msg=audit(1765016290.177:76705): pid=313403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765016290.177:76706): pid=313403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016290.528:76707): prog-id=0 op=UNLOAD
type=ANOM_PROMISCUOUS msg=audit(1765016290.676:76708): dev=tapf29906d1-35 prom=0 old_prom=256 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016290.676:76708): arch=c000003e syscall=46 success=yes exit=32 a0=15 a1=7fff2bfe52b0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016290.676:76708): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=SERVICE_START msg=audit(1765016296.479:76709): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016296.615:76710): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016298.476:76711): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016298.480:76712): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016298.620:76713): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016298.698:76714): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016301.157:76715): dev=tapf870d2a5-42 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016301.157:76715): arch=c000003e syscall=46 success=yes exit=60 a0=15 a1=7fff2bfe50a0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016301.157:76715): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=NETFILTER_CFG msg=audit(1765016301.285:76716): table=filter:2 family=2 entries=18 op=nft_register_chain pid=313613 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016301.285:76716): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7fff1e39be70 a2=0 a3=7fff1e39be5c items=0 ppid=262401 pid=313613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016301.285:76716): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016301.286:76717): table=mangle:3 family=2 entries=24 op=nft_register_chain pid=313613 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016301.286:76717): arch=c000003e syscall=46 success=yes exit=3652 a0=3 a1=7fff1e39be70 a2=0 a3=7fff1e39be5c items=0 ppid=262401 pid=313613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016301.286:76717): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016301.298:76718): table=raw:4 family=2 entries=9 op=nft_register_chain pid=313613 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016301.298:76718): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7fff1e39be70 a2=0 a3=100 items=0 ppid=262401 pid=313613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016301.298:76718): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016301.339:76719): table=filter:5 family=10 entries=18 op=nft_register_chain pid=313615 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016301.339:76719): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffe62b2b3c0 a2=0 a3=7ffe62b2b3ac items=0 ppid=262401 pid=313615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016301.339:76719): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016301.340:76720): table=mangle:6 family=10 entries=22 op=nft_register_chain pid=313615 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016301.340:76720): arch=c000003e syscall=46 success=yes exit=3304 a0=3 a1=7ffe62b2b3c0 a2=0 a3=7ffe62b2b3ac items=0 ppid=262401 pid=313615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016301.340:76720): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016301.356:76721): table=raw:7 family=10 entries=9 op=nft_register_chain pid=313615 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016301.356:76721): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffe62b2b3c0 a2=0 a3=100 items=0 ppid=262401 pid=313615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016301.356:76721): proctitle=6970367461626C65732D726573746F7265002D6E
type=USER_ACCT msg=audit(1765016301.627:76722): pid=313630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765016301.628:76723): pid=313630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071646863702D39323161363463652D306233352D346538332D616161332D66623462303337383135393720656E762050524F434553535F5441473D646E736D6173712D39323161363463652D306233352D346538332D616161332D66623462303337383135393720646E736D617371202D2D6E6F2D686F737473202D2D6E6F2D7265736F6C76202D2D7069642D66696C653D2F7661722F6C69622F6E657574726F6E2F646863702F39323161363463652D306233352D346538332D616161332D6662346230333738313539372F706964202D2D646863702D686F73747366696C653D2F7661722F6C69622F6E657574726F6E2F646863702F39323161363463652D306233352D346538332D616161332D6662346230333738313539372F686F7374202D2D6164646E2D686F7374733D2F7661722F6C69622F6E657574726F6E2F646863702F39323161363463652D306233352D346538332D616161332D6662346230333738313539372F6164646E5F686F737473202D2D646863702D6F70747366696C653D2F7661722F6C69622F6E657574726F6E2F646863702F39323161363463652D306233352D346538332D616161332D6662346230333738313539372F6F707473202D2D646863702D6C6561736566696C653D2F7661722F6C69622F6E657574726F6E2F646863702F39323161363463652D306233352D346538332D616161332D6662346230333738313539372F6C6561736573202D2D646863702D6D617463683D7365743A697078652C313735202D2D646863702D75736572636C6173733D7365743A69707865362C69505845202D2D6C6F63616C2D73657276696365202D2D62696E642D64796E616D6963202D2D646863702D72616E67653D7365743A7375626E65742D33386537363465372D366464622D343630302D383630362D3838343336633631316139372C323030313A6462383A3A2C7374617469632C36342C383634303073202D2D646863702D6F7074696F6E2D666F7263653D6F7074696F6E3A6D74752C31343432202D2D646863702D6C656173652D6D61783D3136373737323136202D2D636F6E662D66696C653D2F6465762F6E756C6C202D2D646F6D61696E3D6F70656E737461636B6C6F63616C exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765016301.628:76724): pid=313630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765016301.630:76725): pid=313630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016302.055:76726): prog-id=2256 op=LOAD
type=SYSCALL msg=audit(1765016302.055:76726): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffc4b10a8d0 a2=90 a3=9500000001 items=0 ppid=313669 pid=313670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016302.055:76726): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F323664333536333532386261633530623164643532636236636530376364
type=USER_END msg=audit(1765016302.137:76727): pid=313630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765016302.137:76728): pid=313630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016302.553:76729): prog-id=0 op=UNLOAD
type=ANOM_PROMISCUOUS msg=audit(1765016302.671:76730): dev=tapf870d2a5-42 prom=0 old_prom=256 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016302.671:76730): arch=c000003e syscall=46 success=yes exit=32 a0=15 a1=7fff2bfe52b0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016302.671:76730): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=CRYPTO_KEY_USER msg=audit(1765016304.821:76731): pid=313735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=313735 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765016304.924:76732): pid=313734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=313735 suid=74 rport=53069 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765016304.924:76733): pid=313734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=313735 suid=74 rport=53069 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016305.536:76734): pid=313734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=313735 suid=74 rport=53069 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016305.536:76735): pid=313734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=313735 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765016305.536:76736): pid=313734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=193.46.255.33 addr=193.46.255.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016305.537:76737): pid=313734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=313734 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765016305.537:76738): pid=313734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=193.46.255.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016309.817:76739): dev=tapf608362e-e1 prom=0 old_prom=256 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016309.817:76739): arch=c000003e syscall=46 success=yes exit=32 a0=15 a1=7fff2bfe52b0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016309.817:76739): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=BPF msg=audit(1765016311.753:76740): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765016316.217:76741): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016316.336:76742): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016319.473:76743): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016319.477:76744): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016319.482:76745): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016319.596:76746): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016319.649:76747): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016319.707:76748): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016325.579:76749): dev=tapbfd7408a-e4 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016325.579:76749): arch=c000003e syscall=46 success=yes exit=60 a0=15 a1=7fff2bfe50a0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016325.579:76749): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=NETFILTER_CFG msg=audit(1765016325.725:76750): table=filter:2 family=2 entries=18 op=nft_register_chain pid=313995 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016325.725:76750): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7fff39671b30 a2=0 a3=7fff39671b1c items=0 ppid=262401 pid=313995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016325.725:76750): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016325.726:76751): table=mangle:3 family=2 entries=24 op=nft_register_chain pid=313995 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016325.726:76751): arch=c000003e syscall=46 success=yes exit=3652 a0=3 a1=7fff39671b30 a2=0 a3=7fff39671b1c items=0 ppid=262401 pid=313995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016325.726:76751): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016325.736:76752): table=raw:4 family=2 entries=9 op=nft_register_chain pid=313995 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016325.736:76752): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7fff39671b30 a2=0 a3=100 items=0 ppid=262401 pid=313995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016325.736:76752): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016325.779:76753): table=filter:5 family=10 entries=18 op=nft_register_chain pid=313997 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016325.779:76753): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7fffe33cd470 a2=0 a3=7fffe33cd45c items=0 ppid=262401 pid=313997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016325.779:76753): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016325.780:76754): table=mangle:6 family=10 entries=22 op=nft_register_chain pid=313997 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016325.780:76754): arch=c000003e syscall=46 success=yes exit=3304 a0=3 a1=7fffe33cd470 a2=0 a3=7fffe33cd45c items=0 ppid=262401 pid=313997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016325.780:76754): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016325.793:76755): table=raw:7 family=10 entries=9 op=nft_register_chain pid=313997 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016325.793:76755): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7fffe33cd470 a2=0 a3=100 items=0 ppid=262401 pid=313997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016325.793:76755): proctitle=6970367461626C65732D726573746F7265002D6E
type=USER_ACCT msg=audit(1765016326.178:76756): pid=314014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765016326.179:76757): pid=314014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071646863702D36363835366337342D643864632D346664322D393232362D65343562313531343831343120656E762050524F434553535F5441473D646E736D6173712D36363835366337342D643864632D346664322D393232362D65343562313531343831343120646E736D617371202D2D6E6F2D686F737473202D2D6E6F2D7265736F6C76202D2D7069642D66696C653D2F7661722F6C69622F6E657574726F6E2F646863702F36363835366337342D643864632D346664322D393232362D6534356231353134383134312F706964202D2D646863702D686F73747366696C653D2F7661722F6C69622F6E657574726F6E2F646863702F36363835366337342D643864632D346664322D393232362D6534356231353134383134312F686F7374202D2D6164646E2D686F7374733D2F7661722F6C69622F6E657574726F6E2F646863702F36363835366337342D643864632D346664322D393232362D6534356231353134383134312F6164646E5F686F737473202D2D646863702D6F70747366696C653D2F7661722F6C69622F6E657574726F6E2F646863702F36363835366337342D643864632D346664322D393232362D6534356231353134383134312F6F707473202D2D646863702D6C6561736566696C653D2F7661722F6C69622F6E657574726F6E2F646863702F36363835366337342D643864632D346664322D393232362D6534356231353134383134312F6C6561736573202D2D646863702D6D617463683D7365743A697078652C313735202D2D646863702D75736572636C6173733D7365743A69707865362C69505845202D2D6C6F63616C2D73657276696365202D2D62696E642D64796E616D6963202D2D646863702D72616E67653D7365743A7375626E65742D65303037396166352D386366362D346639372D626231302D6635363661666639376163362C31302E3130302E302E302C7374617469632C3235352E3235352E3235352E3234302C383634303073202D2D646863702D6F7074696F6E2D666F7263653D6F7074696F6E3A6D74752C31343432202D2D646863702D6C656173652D6D61783D3136202D2D636F6E662D66696C653D2F6465762F6E756C6C202D2D646F6D61696E3D6F70656E737461636B6C6F63616C exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765016326.179:76758): pid=314014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765016326.181:76759): pid=314014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016326.622:76760): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016326.647:76761): prog-id=2257 op=LOAD
type=SYSCALL msg=audit(1765016326.647:76761): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7fff41641be0 a2=90 a3=9500000001 items=0 ppid=314053 pid=314054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016326.647:76761): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F663166643339393032613463366339373338333761396466616262336562
type=USER_END msg=audit(1765016326.717:76762): pid=314014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765016326.717:76763): pid=314014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016326.792:76764): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016328.823:76765): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016328.827:76766): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016328.837:76767): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1765016329.030:76768): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016329.079:76769): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016329.138:76770): dev=tapbfd7408a-e4 prom=0 old_prom=256 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016329.138:76770): arch=c000003e syscall=46 success=yes exit=32 a0=15 a1=7fff2bfe52b0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016329.138:76770): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=USER_LOGIN msg=audit(1765016337.634:76771): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016337.634:76772): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016337.637:76773): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=314296 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016337.703:76774): pid=314296 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016337.703:76775): pid=314296 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016337.704:76776): pid=314296 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016337.709:76777): pid=314296 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016337.711:76778): pid=314296 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016337.711:76779): pid=314296 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016337.715:76780): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016337.715:76781): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765016337.718:76782): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016337.718:76783): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016337.719:76784): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=314314 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016337.780:76785): pid=314314 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016337.780:76786): pid=314314 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016337.781:76787): pid=314314 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016337.784:76788): pid=314314 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016338.350:76789): pid=314314 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016338.350:76790): pid=314314 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016338.416:76791): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016338.416:76792): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765016338.766:76793): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016338.766:76794): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016338.768:76795): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=314365 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016338.830:76796): pid=314365 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016338.830:76797): pid=314365 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016338.831:76798): pid=314365 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016338.835:76799): pid=314365 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016338.838:76800): pid=314365 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016338.839:76801): pid=314365 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016338.843:76802): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016338.843:76803): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=ANOM_PROMISCUOUS msg=audit(1765016345.041:76804): dev=tap6272a5d5-64 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016345.041:76804): arch=c000003e syscall=46 success=yes exit=60 a0=15 a1=7fff2bfe50a0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016345.041:76804): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=NETFILTER_CFG msg=audit(1765016345.170:76805): table=filter:2 family=2 entries=18 op=nft_register_chain pid=314420 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016345.170:76805): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffe79eb1890 a2=0 a3=7ffe79eb187c items=0 ppid=262401 pid=314420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016345.170:76805): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016345.171:76806): table=mangle:3 family=2 entries=24 op=nft_register_chain pid=314420 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016345.171:76806): arch=c000003e syscall=46 success=yes exit=3652 a0=3 a1=7ffe79eb1890 a2=0 a3=7ffe79eb187c items=0 ppid=262401 pid=314420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016345.171:76806): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016345.186:76807): table=raw:4 family=2 entries=9 op=nft_register_chain pid=314420 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016345.186:76807): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffe79eb1890 a2=0 a3=100 items=0 ppid=262401 pid=314420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016345.186:76807): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016345.231:76808): table=filter:5 family=10 entries=18 op=nft_register_chain pid=314422 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016345.231:76808): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffeb4234f20 a2=0 a3=7ffeb4234f0c items=0 ppid=262401 pid=314422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016345.231:76808): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016345.232:76809): table=mangle:6 family=10 entries=22 op=nft_register_chain pid=314422 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016345.232:76809): arch=c000003e syscall=46 success=yes exit=3304 a0=3 a1=7ffeb4234f20 a2=0 a3=7ffeb4234f0c items=0 ppid=262401 pid=314422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016345.232:76809): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016345.241:76810): table=raw:7 family=10 entries=9 op=nft_register_chain pid=314422 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016345.241:76810): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffeb4234f20 a2=0 a3=100 items=0 ppid=262401 pid=314422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016345.241:76810): proctitle=6970367461626C65732D726573746F7265002D6E
type=USER_ACCT msg=audit(1765016345.601:76811): pid=314439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765016345.601:76812): pid=314439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd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exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765016345.602:76813): pid=314439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765016345.603:76814): pid=314439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016346.066:76815): prog-id=2258 op=LOAD
type=SYSCALL msg=audit(1765016346.066:76815): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffdaef2df90 a2=90 a3=9500000001 items=0 ppid=314478 pid=314479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016346.066:76815): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F303865313263376235316362396431653266663636636666653835616562
type=USER_END msg=audit(1765016346.133:76816): pid=314439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765016346.133:76817): pid=314439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016346.471:76818): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016346.589:76819): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016350.467:76820): pid=314565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=314565 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_START msg=audit(1765016350.480:76821): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016350.485:76822): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016350.489:76823): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016350.622:76824): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016350.678:76825): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1765016350.704:76826): pid=314559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=314565 suid=74 rport=35802 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765016350.704:76827): pid=314559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=314565 suid=74 rport=35802 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1765016350.786:76828): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016357.131:76829): pid=314559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=314565 suid=74 rport=35802 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016357.132:76830): pid=314559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=314565 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765016357.132:76831): pid=314559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=101.47.160.186 addr=101.47.160.186 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016357.133:76832): pid=314559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=314559 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765016357.133:76833): pid=314559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016357.152:76834): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016357.300:76835): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016359.476:76836): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016359.480:76837): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016359.597:76838): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016359.723:76839): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016361.142:76840): dev=tap6272a5d5-64 prom=0 old_prom=256 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016361.142:76840): arch=c000003e syscall=46 success=yes exit=32 a0=15 a1=7fff2bfe52b0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016361.142:76840): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=BPF msg=audit(1765016364.506:76841): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765016377.266:76842): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016377.357:76843): dev=tap947432f0-9b prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016377.357:76843): arch=c000003e syscall=46 success=yes exit=60 a0=15 a1=7fff2bfe50a0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016377.357:76843): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=SERVICE_STOP msg=audit(1765016377.430:76844): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=NETFILTER_CFG msg=audit(1765016377.494:76845): table=filter:2 family=2 entries=18 op=nft_register_chain pid=314932 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016377.494:76845): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffd16395400 a2=0 a3=7ffd163953ec items=0 ppid=262401 pid=314932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016377.494:76845): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016377.495:76846): table=mangle:3 family=2 entries=24 op=nft_register_chain pid=314932 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016377.495:76846): arch=c000003e syscall=46 success=yes exit=3652 a0=3 a1=7ffd16395400 a2=0 a3=7ffd163953ec items=0 ppid=262401 pid=314932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016377.495:76846): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016377.503:76847): table=raw:4 family=2 entries=9 op=nft_register_chain pid=314932 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016377.503:76847): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffd16395400 a2=0 a3=100 items=0 ppid=262401 pid=314932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016377.503:76847): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016377.536:76848): table=filter:5 family=10 entries=18 op=nft_register_chain pid=314934 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016377.536:76848): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffe76ca2280 a2=0 a3=7ffe76ca226c items=0 ppid=262401 pid=314934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016377.536:76848): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016377.536:76849): table=mangle:6 family=10 entries=22 op=nft_register_chain pid=314934 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016377.536:76849): arch=c000003e syscall=46 success=yes exit=3304 a0=3 a1=7ffe76ca2280 a2=0 a3=7ffe76ca226c items=0 ppid=262401 pid=314934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016377.536:76849): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016377.545:76850): table=raw:7 family=10 entries=9 op=nft_register_chain pid=314934 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016377.545:76850): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffe76ca2280 a2=0 a3=100 items=0 ppid=262401 pid=314934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016377.545:76850): proctitle=6970367461626C65732D726573746F7265002D6E
type=USER_ACCT msg=audit(1765016377.849:76851): pid=314951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765016377.849:76852): pid=314951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071646863702D63396436373233312D616234632D346639362D626361352D30623139626633326530643020656E762050524F434553535F5441473D646E736D6173712D63396436373233312D616234632D346639362D626361352D30623139626633326530643020646E736D617371202D2D6E6F2D686F737473202D2D6E6F2D7265736F6C76202D2D7069642D66696C653D2F7661722F6C69622F6E657574726F6E2F646863702F63396436373233312D616234632D346639362D626361352D3062313962663332653064302F706964202D2D646863702D686F73747366696C653D2F7661722F6C69622F6E657574726F6E2F646863702F63396436373233312D616234632D346639362D626361352D3062313962663332653064302F686F7374202D2D6164646E2D686F7374733D2F7661722F6C69622F6E657574726F6E2F646863702F63396436373233312D616234632D346639362D626361352D3062313962663332653064302F6164646E5F686F737473202D2D646863702D6F70747366696C653D2F7661722F6C69622F6E657574726F6E2F646863702F63396436373233312D616234632D346639362D626361352D3062313962663332653064302F6F707473202D2D646863702D6C6561736566696C653D2F7661722F6C69622F6E657574726F6E2F646863702F63396436373233312D616234632D346639362D626361352D3062313962663332653064302F6C6561736573202D2D646863702D6D617463683D7365743A697078652C313735202D2D646863702D75736572636C6173733D7365743A69707865362C69505845202D2D6C6F63616C2D73657276696365202D2D62696E642D64796E616D6963202D2D646863702D72616E67653D7365743A7375626E65742D62323535366565632D353034612D346436342D613736392D6265346264303734303538302C323030313A6462383A313A3A2C7374617469632C36342C383634303073202D2D646863702D6F7074696F6E2D666F7263653D6F7074696F6E3A6D74752C31343432202D2D646863702D6C656173652D6D61783D3136373737323136202D2D636F6E662D66696C653D2F6465762F6E756C6C202D2D646F6D61696E3D6F70656E737461636B6C6F63616C exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765016377.850:76853): pid=314951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765016377.852:76854): pid=314951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016378.287:76855): prog-id=2259 op=LOAD
type=SYSCALL msg=audit(1765016378.287:76855): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffd9b3120a0 a2=90 a3=9500000001 items=0 ppid=314990 pid=314991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016378.287:76855): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F623937326339623838633061313966616532326337356162336135366434
type=USER_END msg=audit(1765016378.359:76856): pid=314951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765016378.360:76857): pid=314951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016381.478:76858): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016381.483:76859): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016381.487:76860): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016381.659:76861): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016381.751:76862): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016381.888:76863): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016387.146:76864): dev=tap8d2f31e2-69 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016387.146:76864): arch=c000003e syscall=46 success=yes exit=60 a0=15 a1=7fff2bfe50a0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016387.146:76864): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=NETFILTER_CFG msg=audit(1765016387.265:76865): table=filter:2 family=2 entries=18 op=nft_register_chain pid=315226 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016387.265:76865): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffd03028ab0 a2=0 a3=7ffd03028a9c items=0 ppid=262401 pid=315226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016387.265:76865): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016387.265:76866): table=mangle:3 family=2 entries=24 op=nft_register_chain pid=315226 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016387.265:76866): arch=c000003e syscall=46 success=yes exit=3652 a0=3 a1=7ffd03028ab0 a2=0 a3=7ffd03028a9c items=0 ppid=262401 pid=315226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016387.265:76866): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016387.271:76867): table=raw:4 family=2 entries=9 op=nft_register_chain pid=315226 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016387.271:76867): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffd03028ab0 a2=0 a3=100 items=0 ppid=262401 pid=315226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016387.271:76867): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016387.315:76868): table=filter:5 family=10 entries=18 op=nft_register_chain pid=315231 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016387.315:76868): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffed0464e90 a2=0 a3=7ffed0464e7c items=0 ppid=262401 pid=315231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016387.315:76868): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016387.317:76869): table=mangle:6 family=10 entries=22 op=nft_register_chain pid=315231 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016387.317:76869): arch=c000003e syscall=46 success=yes exit=3304 a0=3 a1=7ffed0464e90 a2=0 a3=7ffed0464e7c items=0 ppid=262401 pid=315231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016387.317:76869): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016387.324:76870): table=raw:7 family=10 entries=9 op=nft_register_chain pid=315231 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016387.324:76870): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffed0464e90 a2=0 a3=100 items=0 ppid=262401 pid=315231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016387.324:76870): proctitle=6970367461626C65732D726573746F7265002D6E
type=SERVICE_START msg=audit(1765016387.472:76871): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016387.599:76872): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016387.671:76873): dev=tap947432f0-9b prom=0 old_prom=256 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=USER_ACCT msg=audit(1765016387.686:76874): pid=315272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765016387.686:76875): pid=315272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd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exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=SYSCALL msg=audit(1765016387.671:76873): arch=c000003e syscall=46 success=yes exit=32 a0=19 a1=7fff2bfe52b0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=CRED_REFR msg=audit(1765016387.687:76876): pid=315272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=PROCTITLE msg=audit(1765016387.671:76873): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=USER_START msg=audit(1765016387.688:76877): pid=315272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016388.156:76878): prog-id=2260 op=LOAD
type=SYSCALL msg=audit(1765016388.156:76878): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffd5a7aa500 a2=90 a3=9500000001 items=0 ppid=315312 pid=315313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016388.156:76878): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F633262636435633437663864373933353537303964663366393330393332
type=USER_END msg=audit(1765016388.230:76879): pid=315272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765016388.231:76880): pid=315272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016389.212:76881): prog-id=0 op=UNLOAD
type=ANOM_PROMISCUOUS msg=audit(1765016389.334:76882): dev=tap8d2f31e2-69 prom=0 old_prom=256 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016389.334:76882): arch=c000003e syscall=46 success=yes exit=32 a0=19 a1=7fff2bfe52b0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016389.334:76882): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=SERVICE_START msg=audit(1765016389.974:76883): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016389.978:76884): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016390.158:76885): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016390.185:76886): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016394.104:76887): prog-id=0 op=UNLOAD
type=USER_LOGIN msg=audit(1765016398.861:76888): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016398.861:76889): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016398.864:76890): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=315478 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016398.928:76891): pid=315478 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016398.928:76892): pid=315478 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016398.930:76893): pid=315478 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016398.934:76894): pid=315478 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016398.937:76895): pid=315478 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016398.937:76896): pid=315478 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016398.941:76897): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016398.941:76898): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765016398.947:76899): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016398.947:76900): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016398.949:76901): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=315496 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016399.017:76902): pid=315496 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016399.018:76903): pid=315496 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016399.018:76904): pid=315496 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016399.022:76905): pid=315496 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=ANOM_PROMISCUOUS msg=audit(1765016399.215:76906): dev=tap29a03e65-bd prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016399.215:76906): arch=c000003e syscall=46 success=yes exit=60 a0=19 a1=7fff2bfe50a0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016399.215:76906): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=NETFILTER_CFG msg=audit(1765016399.364:76907): table=filter:2 family=2 entries=18 op=nft_register_chain pid=315542 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016399.364:76907): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffdd9787fd0 a2=0 a3=7ffdd9787fbc items=0 ppid=262401 pid=315542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016399.364:76907): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016399.365:76908): table=mangle:3 family=2 entries=24 op=nft_register_chain pid=315542 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016399.365:76908): arch=c000003e syscall=46 success=yes exit=3652 a0=3 a1=7ffdd9787fd0 a2=0 a3=7ffdd9787fbc items=0 ppid=262401 pid=315542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016399.365:76908): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016399.383:76909): table=raw:4 family=2 entries=9 op=nft_register_chain pid=315542 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016399.383:76909): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffdd9787fd0 a2=0 a3=100 items=0 ppid=262401 pid=315542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016399.383:76909): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016399.417:76910): table=filter:5 family=10 entries=18 op=nft_register_chain pid=315553 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016399.417:76910): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffc222ca9c0 a2=0 a3=7ffc222ca9ac items=0 ppid=262401 pid=315553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016399.417:76910): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016399.418:76911): table=mangle:6 family=10 entries=22 op=nft_register_chain pid=315553 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016399.418:76911): arch=c000003e syscall=46 success=yes exit=3304 a0=3 a1=7ffc222ca9c0 a2=0 a3=7ffc222ca9ac items=0 ppid=262401 pid=315553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016399.418:76911): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016399.430:76912): table=raw:7 family=10 entries=9 op=nft_register_chain pid=315553 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016399.430:76912): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffc222ca9c0 a2=0 a3=100 items=0 ppid=262401 pid=315553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016399.430:76912): proctitle=6970367461626C65732D726573746F7265002D6E
type=USER_END msg=audit(1765016399.644:76913): pid=315496 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016399.645:76914): pid=315496 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_ACCT msg=audit(1765016399.688:76915): pid=315585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765016399.688:76916): pid=315585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd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exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765016399.688:76917): pid=315585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765016399.689:76918): pid=315585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765016399.743:76919): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016399.743:76920): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765016400.021:76921): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016400.021:76922): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016400.023:76923): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=315611 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016400.085:76924): pid=315611 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016400.086:76925): pid=315611 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016400.086:76926): pid=315611 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016400.091:76927): pid=315611 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016400.095:76928): pid=315611 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016400.095:76929): pid=315611 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016400.099:76930): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016400.099:76931): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=BPF msg=audit(1765016400.171:76932): prog-id=2261 op=LOAD
type=SYSCALL msg=audit(1765016400.171:76932): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffe17681250 a2=90 a3=9500000001 items=0 ppid=315642 pid=315643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016400.171:76932): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F643331326131306435613532623363366331363933326239643334363734
type=USER_END msg=audit(1765016400.252:76933): pid=315585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765016400.253:76934): pid=315585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016400.332:76935): dev=tap29a03e65-bd prom=0 old_prom=256 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016400.332:76935): arch=c000003e syscall=46 success=yes exit=32 a0=15 a1=7fff2bfe52b0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016400.332:76935): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=BPF msg=audit(1765016401.598:76936): prog-id=0 op=UNLOAD
type=ANOM_PROMISCUOUS msg=audit(1765016407.344:76937): dev=tap95e0b5c7-fe prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016407.344:76937): arch=c000003e syscall=46 success=yes exit=60 a0=15 a1=7fff2bfe50a0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016407.344:76937): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=NETFILTER_CFG msg=audit(1765016407.478:76938): table=filter:2 family=2 entries=18 op=nft_register_chain pid=315778 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016407.478:76938): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffe77819c30 a2=0 a3=7ffe77819c1c items=0 ppid=262401 pid=315778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016407.478:76938): proctitle=69707461626C65732D726573746F7265002D6E
type=SERVICE_START msg=audit(1765016407.479:76939): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=NETFILTER_CFG msg=audit(1765016407.480:76940): table=mangle:3 family=2 entries=24 op=nft_register_chain pid=315778 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016407.480:76940): arch=c000003e syscall=46 success=yes exit=3652 a0=3 a1=7ffe77819c30 a2=0 a3=7ffe77819c1c items=0 ppid=262401 pid=315778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016407.480:76940): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016407.496:76941): table=raw:4 family=2 entries=9 op=nft_register_chain pid=315778 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016407.496:76941): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffe77819c30 a2=0 a3=100 items=0 ppid=262401 pid=315778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016407.496:76941): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016407.540:76942): table=filter:5 family=10 entries=18 op=nft_register_chain pid=315790 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016407.540:76942): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffc63ade610 a2=0 a3=7ffc63ade5fc items=0 ppid=262401 pid=315790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016407.540:76942): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016407.541:76943): table=mangle:6 family=10 entries=22 op=nft_register_chain pid=315790 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016407.541:76943): arch=c000003e syscall=46 success=yes exit=3304 a0=3 a1=7ffc63ade610 a2=0 a3=7ffc63ade5fc items=0 ppid=262401 pid=315790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016407.541:76943): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016407.555:76944): table=raw:7 family=10 entries=9 op=nft_register_chain pid=315790 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016407.555:76944): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffc63ade610 a2=0 a3=100 items=0 ppid=262401 pid=315790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016407.555:76944): proctitle=6970367461626C65732D726573746F7265002D6E
type=SERVICE_STOP msg=audit(1765016407.621:76945): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765016407.846:76946): pid=315815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765016407.847:76947): pid=315815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd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exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765016407.847:76948): pid=315815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765016407.848:76949): pid=315815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016408.323:76950): prog-id=2262 op=LOAD
type=SYSCALL msg=audit(1765016408.323:76950): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffc288fcc70 a2=90 a3=9500000001 items=0 ppid=315855 pid=315856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016408.323:76950): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F666237616333376638313230306130623266376364383563313832306464
type=USER_END msg=audit(1765016408.398:76951): pid=315815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765016408.398:76952): pid=315815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016412.485:76953): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016412.489:76954): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016412.492:76955): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016412.608:76956): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016412.715:76957): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016412.840:76958): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016413.750:76959): dev=tap0321377d-c7 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016413.750:76959): arch=c000003e syscall=46 success=yes exit=60 a0=15 a1=7fff2bfe50a0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016413.750:76959): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=NETFILTER_CFG msg=audit(1765016413.914:76960): table=filter:2 family=2 entries=18 op=nft_register_chain pid=315958 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016413.914:76960): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffcc2ff5b20 a2=0 a3=7ffcc2ff5b0c items=0 ppid=262401 pid=315958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016413.914:76960): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016413.915:76961): table=mangle:3 family=2 entries=24 op=nft_register_chain pid=315958 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016413.915:76961): arch=c000003e syscall=46 success=yes exit=3652 a0=3 a1=7ffcc2ff5b20 a2=0 a3=7ffcc2ff5b0c items=0 ppid=262401 pid=315958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016413.915:76961): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016413.935:76962): table=raw:4 family=2 entries=9 op=nft_register_chain pid=315958 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016413.935:76962): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffcc2ff5b20 a2=0 a3=100 items=0 ppid=262401 pid=315958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016413.935:76962): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016413.978:76963): table=filter:5 family=10 entries=18 op=nft_register_chain pid=315960 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016413.978:76963): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7fff7cbbe150 a2=0 a3=7fff7cbbe13c items=0 ppid=262401 pid=315960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016413.978:76963): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016413.979:76964): table=mangle:6 family=10 entries=22 op=nft_register_chain pid=315960 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016413.979:76964): arch=c000003e syscall=46 success=yes exit=3304 a0=3 a1=7fff7cbbe150 a2=0 a3=7fff7cbbe13c items=0 ppid=262401 pid=315960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016413.979:76964): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016413.993:76965): table=raw:7 family=10 entries=9 op=nft_register_chain pid=315960 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016413.993:76965): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7fff7cbbe150 a2=0 a3=100 items=0 ppid=262401 pid=315960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016413.993:76965): proctitle=6970367461626C65732D726573746F7265002D6E
type=USER_ACCT msg=audit(1765016414.298:76966): pid=315977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765016414.298:76967): pid=315977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071646863702D30326632633036632D363564322D346263392D613164322D64336436326335376664323020656E762050524F434553535F5441473D646E736D6173712D30326632633036632D363564322D346263392D613164322D64336436326335376664323020646E736D617371202D2D6E6F2D686F737473202D2D6E6F2D7265736F6C76202D2D7069642D66696C653D2F7661722F6C69622F6E657574726F6E2F646863702F30326632633036632D363564322D346263392D613164322D6433643632633537666432302F706964202D2D646863702D686F73747366696C653D2F7661722F6C69622F6E657574726F6E2F646863702F30326632633036632D363564322D346263392D613164322D6433643632633537666432302F686F7374202D2D6164646E2D686F7374733D2F7661722F6C69622F6E657574726F6E2F646863702F30326632633036632D363564322D346263392D613164322D6433643632633537666432302F6164646E5F686F737473202D2D646863702D6F70747366696C653D2F7661722F6C69622F6E657574726F6E2F646863702F30326632633036632D363564322D346263392D613164322D6433643632633537666432302F6F707473202D2D646863702D6C6561736566696C653D2F7661722F6C69622F6E657574726F6E2F646863702F30326632633036632D363564322D346263392D613164322D6433643632633537666432302F6C6561736573202D2D646863702D6D617463683D7365743A697078652C313735202D2D646863702D75736572636C6173733D7365743A69707865362C69505845202D2D6C6F63616C2D73657276696365202D2D62696E642D64796E616D6963202D2D646863702D72616E67653D7365743A7375626E65742D65643465356137652D646165312D343836362D393430392D6137643230666365666236382C323030313A6462383A3A2C7374617469632C36342C383634303073202D2D646863702D6F7074696F6E2D666F7263653D6F7074696F6E3A6D74752C31343432202D2D646863702D6C656173652D6D61783D3136373737323136202D2D636F6E662D66696C653D2F6465762F6E756C6C202D2D646F6D61696E3D6F70656E737461636B6C6F63616C exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765016414.299:76968): pid=315977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765016414.300:76969): pid=315977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016414.822:76970): prog-id=2263 op=LOAD
type=SYSCALL msg=audit(1765016414.822:76970): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7fff9f593150 a2=90 a3=9500000001 items=0 ppid=316016 pid=316017 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016414.822:76970): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393031653535333165353434626130386136393332316339373437353138
type=USER_END msg=audit(1765016414.894:76971): pid=315977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765016414.895:76972): pid=315977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016414.993:76973): dev=tapd02e78d4-85 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016414.993:76973): arch=c000003e syscall=46 success=yes exit=60 a0=15 a1=7fff2bfe50a0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016414.993:76973): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=NETFILTER_CFG msg=audit(1765016415.119:76974): table=filter:2 family=2 entries=18 op=nft_register_chain pid=316040 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016415.119:76974): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7fffe1526d10 a2=0 a3=7fffe1526cfc items=0 ppid=262401 pid=316040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016415.119:76974): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016415.120:76975): table=mangle:3 family=2 entries=24 op=nft_register_chain pid=316040 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016415.120:76975): arch=c000003e syscall=46 success=yes exit=3652 a0=3 a1=7fffe1526d10 a2=0 a3=7fffe1526cfc items=0 ppid=262401 pid=316040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016415.120:76975): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016415.132:76976): table=raw:4 family=2 entries=9 op=nft_register_chain pid=316040 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016415.132:76976): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7fffe1526d10 a2=0 a3=100 items=0 ppid=262401 pid=316040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016415.132:76976): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016415.168:76977): table=filter:5 family=10 entries=18 op=nft_register_chain pid=316042 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016415.168:76977): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffcf52d5720 a2=0 a3=7ffcf52d570c items=0 ppid=262401 pid=316042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016415.168:76977): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016415.169:76978): table=mangle:6 family=10 entries=22 op=nft_register_chain pid=316042 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016415.169:76978): arch=c000003e syscall=46 success=yes exit=3304 a0=3 a1=7ffcf52d5720 a2=0 a3=7ffcf52d570c items=0 ppid=262401 pid=316042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016415.169:76978): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016415.178:76979): table=raw:7 family=10 entries=9 op=nft_register_chain pid=316042 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016415.178:76979): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffcf52d5720 a2=0 a3=100 items=0 ppid=262401 pid=316042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016415.178:76979): proctitle=6970367461626C65732D726573746F7265002D6E
type=USER_ACCT msg=audit(1765016415.477:76980): pid=316059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765016415.477:76981): pid=316059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd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exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765016415.478:76982): pid=316059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765016415.480:76983): pid=316059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016415.978:76984): prog-id=2264 op=LOAD
type=SYSCALL msg=audit(1765016415.978:76984): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffe4538da20 a2=90 a3=9500000001 items=0 ppid=316098 pid=316099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016415.978:76984): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F353466666337643432353865623333623231393636333037623265303138
type=USER_END msg=audit(1765016416.057:76985): pid=316059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765016416.057:76986): pid=316059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016417.733:76987): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016417.934:76988): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016417.947:76989): dev=tapd02e78d4-85 prom=0 old_prom=256 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016417.947:76989): arch=c000003e syscall=46 success=yes exit=32 a0=15 a1=7fff2bfe52b0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016417.947:76989): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=BPF msg=audit(1765016418.926:76990): prog-id=0 op=UNLOAD
type=ANOM_PROMISCUOUS msg=audit(1765016419.378:76991): dev=tapf7ebd70b-fa prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016419.378:76991): arch=c000003e syscall=46 success=yes exit=60 a0=15 a1=7fff2bfe50a0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016419.378:76991): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=NETFILTER_CFG msg=audit(1765016419.518:76992): table=filter:2 family=2 entries=18 op=nft_register_chain pid=316336 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016419.518:76992): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffc7e9bde20 a2=0 a3=7ffc7e9bde0c items=0 ppid=262401 pid=316336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016419.518:76992): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016419.519:76993): table=mangle:3 family=2 entries=24 op=nft_register_chain pid=316336 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016419.519:76993): arch=c000003e syscall=46 success=yes exit=3652 a0=3 a1=7ffc7e9bde20 a2=0 a3=7ffc7e9bde0c items=0 ppid=262401 pid=316336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016419.519:76993): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016419.532:76994): table=raw:4 family=2 entries=9 op=nft_register_chain pid=316336 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016419.532:76994): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffc7e9bde20 a2=0 a3=100 items=0 ppid=262401 pid=316336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016419.532:76994): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016419.574:76995): table=filter:5 family=10 entries=18 op=nft_register_chain pid=316338 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016419.574:76995): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffeef1860b0 a2=0 a3=7ffeef18609c items=0 ppid=262401 pid=316338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016419.574:76995): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016419.575:76996): table=mangle:6 family=10 entries=22 op=nft_register_chain pid=316338 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016419.575:76996): arch=c000003e syscall=46 success=yes exit=3304 a0=3 a1=7ffeef1860b0 a2=0 a3=7ffeef18609c items=0 ppid=262401 pid=316338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016419.575:76996): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016419.589:76997): table=raw:7 family=10 entries=9 op=nft_register_chain pid=316338 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016419.589:76997): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffeef1860b0 a2=0 a3=100 items=0 ppid=262401 pid=316338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016419.589:76997): proctitle=6970367461626C65732D726573746F7265002D6E
type=USER_ACCT msg=audit(1765016419.873:76998): pid=316353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765016419.875:76999): pid=316353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd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exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765016419.875:77000): pid=316353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765016419.876:77001): pid=316353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016420.323:77002): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016420.328:77003): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016420.395:77004): prog-id=2265 op=LOAD
type=SYSCALL msg=audit(1765016420.395:77004): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffd5ce653a0 a2=90 a3=9500000001 items=0 ppid=316404 pid=316405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016420.395:77004): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F336466306265353963613934643931343961666631353137613733326564
type=USER_END msg=audit(1765016420.462:77005): pid=316353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765016420.462:77006): pid=316353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016420.515:77007): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016420.558:77008): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016420.682:77009): prog-id=0 op=UNLOAD
type=ANOM_PROMISCUOUS msg=audit(1765016420.758:77010): dev=tapf7ebd70b-fa prom=0 old_prom=256 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016420.758:77010): arch=c000003e syscall=46 success=yes exit=32 a0=15 a1=7fff2bfe52b0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016420.758:77010): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=ANOM_PROMISCUOUS msg=audit(1765016425.672:77011): dev=tap38dccc84-87 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016425.672:77011): arch=c000003e syscall=46 success=yes exit=60 a0=15 a1=7fff2bfe50a0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016425.672:77011): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=NETFILTER_CFG msg=audit(1765016425.807:77012): table=filter:2 family=2 entries=18 op=nft_register_chain pid=316522 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016425.807:77012): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffce2a36e70 a2=0 a3=7ffce2a36e5c items=0 ppid=262401 pid=316522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016425.807:77012): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016425.808:77013): table=mangle:3 family=2 entries=24 op=nft_register_chain pid=316522 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016425.808:77013): arch=c000003e syscall=46 success=yes exit=3652 a0=3 a1=7ffce2a36e70 a2=0 a3=7ffce2a36e5c items=0 ppid=262401 pid=316522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016425.808:77013): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016425.823:77014): table=raw:4 family=2 entries=9 op=nft_register_chain pid=316522 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016425.823:77014): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffce2a36e70 a2=0 a3=100 items=0 ppid=262401 pid=316522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016425.823:77014): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016425.867:77015): table=filter:5 family=10 entries=18 op=nft_register_chain pid=316524 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016425.867:77015): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffd62abc5f0 a2=0 a3=7ffd62abc5dc items=0 ppid=262401 pid=316524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016425.867:77015): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016425.868:77016): table=mangle:6 family=10 entries=22 op=nft_register_chain pid=316524 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016425.868:77016): arch=c000003e syscall=46 success=yes exit=3304 a0=3 a1=7ffd62abc5f0 a2=0 a3=7ffd62abc5dc items=0 ppid=262401 pid=316524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016425.868:77016): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016425.877:77017): table=raw:7 family=10 entries=9 op=nft_register_chain pid=316524 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016425.877:77017): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffd62abc5f0 a2=0 a3=100 items=0 ppid=262401 pid=316524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016425.877:77017): proctitle=6970367461626C65732D726573746F7265002D6E
type=USER_ACCT msg=audit(1765016426.176:77018): pid=316539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765016426.176:77019): pid=316539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd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exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765016426.177:77020): pid=316539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765016426.178:77021): pid=316539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016426.681:77022): prog-id=2266 op=LOAD
type=SYSCALL msg=audit(1765016426.681:77022): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffdd3cdf7c0 a2=90 a3=9500000001 items=0 ppid=316578 pid=316579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016426.681:77022): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F626464643464636461376663386265396366623533333639383861643033
type=USER_END msg=audit(1765016426.743:77023): pid=316539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765016426.743:77024): pid=316539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016427.071:77025): prog-id=0 op=UNLOAD
type=ANOM_PROMISCUOUS msg=audit(1765016427.236:77026): dev=tap38dccc84-87 prom=0 old_prom=256 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016427.236:77026): arch=c000003e syscall=46 success=yes exit=32 a0=15 a1=7fff2bfe52b0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016427.236:77026): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=ANOM_PROMISCUOUS msg=audit(1765016433.108:77027): dev=tapd744111f-47 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016433.108:77027): arch=c000003e syscall=46 success=yes exit=60 a0=15 a1=7fff2bfe50a0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016433.108:77027): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=NETFILTER_CFG msg=audit(1765016433.247:77028): table=filter:2 family=2 entries=18 op=nft_register_chain pid=316678 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016433.247:77028): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffffd2b5840 a2=0 a3=7ffffd2b582c items=0 ppid=262401 pid=316678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016433.247:77028): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016433.248:77029): table=mangle:3 family=2 entries=24 op=nft_register_chain pid=316678 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016433.248:77029): arch=c000003e syscall=46 success=yes exit=3652 a0=3 a1=7ffffd2b5840 a2=0 a3=7ffffd2b582c items=0 ppid=262401 pid=316678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016433.248:77029): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016433.262:77030): table=raw:4 family=2 entries=9 op=nft_register_chain pid=316678 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016433.262:77030): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffffd2b5840 a2=0 a3=100 items=0 ppid=262401 pid=316678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016433.262:77030): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016433.301:77031): table=filter:5 family=10 entries=18 op=nft_register_chain pid=316692 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016433.301:77031): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7fffa30e7cd0 a2=0 a3=7fffa30e7cbc items=0 ppid=262401 pid=316692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016433.301:77031): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016433.302:77032): table=mangle:6 family=10 entries=22 op=nft_register_chain pid=316692 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016433.302:77032): arch=c000003e syscall=46 success=yes exit=3304 a0=3 a1=7fffa30e7cd0 a2=0 a3=7fffa30e7cbc items=0 ppid=262401 pid=316692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016433.302:77032): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016433.312:77033): table=raw:7 family=10 entries=9 op=nft_register_chain pid=316692 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016433.312:77033): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7fffa30e7cd0 a2=0 a3=100 items=0 ppid=262401 pid=316692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016433.312:77033): proctitle=6970367461626C65732D726573746F7265002D6E
type=USER_ACCT msg=audit(1765016433.620:77034): pid=316721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765016433.620:77035): pid=316721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071646863702D64636539636639332D373565332D343533622D626434322D63643730356165643066353320656E762050524F434553535F5441473D646E736D6173712D64636539636639332D373565332D343533622D626434322D63643730356165643066353320646E736D617371202D2D6E6F2D686F737473202D2D6E6F2D7265736F6C76202D2D7069642D66696C653D2F7661722F6C69622F6E657574726F6E2F646863702F64636539636639332D373565332D343533622D626434322D6364373035616564306635332F706964202D2D646863702D686F73747366696C653D2F7661722F6C69622F6E657574726F6E2F646863702F64636539636639332D373565332D343533622D626434322D6364373035616564306635332F686F7374202D2D6164646E2D686F7374733D2F7661722F6C69622F6E657574726F6E2F646863702F64636539636639332D373565332D343533622D626434322D6364373035616564306635332F6164646E5F686F737473202D2D646863702D6F70747366696C653D2F7661722F6C69622F6E657574726F6E2F646863702F64636539636639332D373565332D343533622D626434322D6364373035616564306635332F6F707473202D2D646863702D6C6561736566696C653D2F7661722F6C69622F6E657574726F6E2F646863702F64636539636639332D373565332D343533622D626434322D6364373035616564306635332F6C6561736573202D2D646863702D6D617463683D7365743A697078652C313735202D2D646863702D75736572636C6173733D7365743A69707865362C69505845202D2D6C6F63616C2D73657276696365202D2D62696E642D64796E616D6963202D2D646863702D72616E67653D7365743A7375626E65742D35373431613739332D303063332D346461662D623364362D6336663265363030336564362C323030313A6462383A3A2C7374617469632C36342C383634303073202D2D646863702D6F7074696F6E2D666F7263653D6F7074696F6E3A6D74752C31343432202D2D646863702D6C656173652D6D61783D3136373737323136202D2D636F6E662D66696C653D2F6465762F6E756C6C202D2D646F6D61696E3D6F70656E737461636B6C6F63616C exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765016433.621:77036): pid=316721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765016433.622:77037): pid=316721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016434.083:77038): prog-id=2267 op=LOAD
type=SYSCALL msg=audit(1765016434.083:77038): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffdbd7fe450 a2=90 a3=9500000001 items=0 ppid=316760 pid=316761 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016434.083:77038): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363830646161653033373831386562373230316136396364623665653761
type=USER_END msg=audit(1765016434.161:77039): pid=316721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765016434.162:77040): pid=316721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016434.838:77041): prog-id=0 op=UNLOAD
type=ANOM_PROMISCUOUS msg=audit(1765016434.991:77042): dev=tapd744111f-47 prom=0 old_prom=256 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016434.991:77042): arch=c000003e syscall=46 success=yes exit=32 a0=34 a1=7fff2bfe52b0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016434.991:77042): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=SERVICE_START msg=audit(1765016438.475:77043): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016438.604:77044): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016441.483:77045): dev=tapd511f2db-2e prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016441.483:77045): arch=c000003e syscall=46 success=yes exit=60 a0=34 a1=7fff2bfe50a0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016441.483:77045): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=NETFILTER_CFG msg=audit(1765016441.647:77046): table=filter:2 family=2 entries=18 op=nft_register_chain pid=316913 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016441.647:77046): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffd0715e480 a2=0 a3=7ffd0715e46c items=0 ppid=262401 pid=316913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016441.647:77046): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016441.648:77047): table=mangle:3 family=2 entries=24 op=nft_register_chain pid=316913 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016441.648:77047): arch=c000003e syscall=46 success=yes exit=3652 a0=3 a1=7ffd0715e480 a2=0 a3=7ffd0715e46c items=0 ppid=262401 pid=316913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016441.648:77047): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016441.662:77048): table=raw:4 family=2 entries=9 op=nft_register_chain pid=316913 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016441.662:77048): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffd0715e480 a2=0 a3=100 items=0 ppid=262401 pid=316913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016441.662:77048): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016441.694:77049): table=filter:5 family=10 entries=18 op=nft_register_chain pid=316915 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016441.694:77049): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffe0ba86400 a2=0 a3=7ffe0ba863ec items=0 ppid=262401 pid=316915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016441.694:77049): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016441.695:77050): table=mangle:6 family=10 entries=22 op=nft_register_chain pid=316915 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016441.695:77050): arch=c000003e syscall=46 success=yes exit=3304 a0=3 a1=7ffe0ba86400 a2=0 a3=7ffe0ba863ec items=0 ppid=262401 pid=316915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016441.695:77050): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016441.705:77051): table=raw:7 family=10 entries=9 op=nft_register_chain pid=316915 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016441.705:77051): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffe0ba86400 a2=0 a3=100 items=0 ppid=262401 pid=316915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016441.705:77051): proctitle=6970367461626C65732D726573746F7265002D6E
type=USER_ACCT msg=audit(1765016441.998:77052): pid=316932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765016441.999:77053): pid=316932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd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exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765016441.999:77054): pid=316932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765016442.001:77055): pid=316932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016442.498:77056): prog-id=2268 op=LOAD
type=SYSCALL msg=audit(1765016442.498:77056): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffe0d707a60 a2=90 a3=9500000001 items=0 ppid=316971 pid=316972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016442.498:77056): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F623464626363396135323265656532616333333366623937353437313136
type=USER_END msg=audit(1765016442.588:77057): pid=316932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765016442.589:77058): pid=316932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016442.778:77059): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016442.782:77060): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016442.783:77061): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765016442.888:77062): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016442.890:77063): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016443.000:77064): dev=tapd511f2db-2e prom=0 old_prom=256 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016443.000:77064): arch=c000003e syscall=46 success=yes exit=32 a0=34 a1=7fff2bfe52b0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016443.000:77064): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=SERVICE_STOP msg=audit(1765016443.063:77065): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016443.110:77066): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016448.477:77067): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016448.596:77068): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016451.478:77069): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016451.482:77070): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016451.630:77071): dev=tap70395743-5f prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016451.630:77071): arch=c000003e syscall=46 success=yes exit=60 a0=34 a1=7fff2bfe50a0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016451.630:77071): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=SERVICE_STOP msg=audit(1765016451.642:77072): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016451.721:77073): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=NETFILTER_CFG msg=audit(1765016451.760:77074): table=filter:2 family=2 entries=18 op=nft_register_chain pid=317245 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016451.760:77074): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffec6f4b1f0 a2=0 a3=7ffec6f4b1dc items=0 ppid=262401 pid=317245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016451.760:77074): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016451.761:77075): table=mangle:3 family=2 entries=24 op=nft_register_chain pid=317245 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016451.761:77075): arch=c000003e syscall=46 success=yes exit=3652 a0=3 a1=7ffec6f4b1f0 a2=0 a3=7ffec6f4b1dc items=0 ppid=262401 pid=317245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016451.761:77075): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016451.778:77076): table=raw:4 family=2 entries=9 op=nft_register_chain pid=317245 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016451.778:77076): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffec6f4b1f0 a2=0 a3=100 items=0 ppid=262401 pid=317245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016451.778:77076): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016451.812:77077): table=filter:5 family=10 entries=18 op=nft_register_chain pid=317247 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016451.812:77077): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffef59928e0 a2=0 a3=7ffef59928cc items=0 ppid=262401 pid=317247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016451.812:77077): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016451.812:77078): table=mangle:6 family=10 entries=22 op=nft_register_chain pid=317247 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016451.812:77078): arch=c000003e syscall=46 success=yes exit=3304 a0=3 a1=7ffef59928e0 a2=0 a3=7ffef59928cc items=0 ppid=262401 pid=317247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016451.812:77078): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016451.828:77079): table=raw:7 family=10 entries=9 op=nft_register_chain pid=317247 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016451.828:77079): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffef59928e0 a2=0 a3=100 items=0 ppid=262401 pid=317247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016451.828:77079): proctitle=6970367461626C65732D726573746F7265002D6E
type=USER_ACCT msg=audit(1765016452.089:77080): pid=317264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765016452.090:77081): pid=317264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd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exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765016452.091:77082): pid=317264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765016452.093:77083): pid=317264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016452.444:77084): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765016452.595:77085): prog-id=2269 op=LOAD
type=SYSCALL msg=audit(1765016452.595:77085): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffd23bbb8f0 a2=90 a3=9500000001 items=0 ppid=317361 pid=317362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016452.595:77085): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F333637636537393937633264613139366166343039363362373065303961
type=ANOM_PROMISCUOUS msg=audit(1765016452.613:77086): dev=tap0321377d-c7 prom=0 old_prom=256 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016452.613:77086): arch=c000003e syscall=46 success=yes exit=32 a0=34 a1=7fff2bfe52b0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016452.613:77086): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=USER_END msg=audit(1765016452.658:77087): pid=317264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765016452.658:77088): pid=317264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016454.004:77089): prog-id=0 op=UNLOAD
type=ANOM_PROMISCUOUS msg=audit(1765016454.111:77090): dev=tap95e0b5c7-fe prom=0 old_prom=256 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016454.111:77090): arch=c000003e syscall=46 success=yes exit=32 a0=34 a1=7fff2bfe52b0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016454.111:77090): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=ANOM_PROMISCUOUS msg=audit(1765016457.774:77091): dev=tap70395743-5f prom=0 old_prom=256 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016457.774:77091): arch=c000003e syscall=46 success=yes exit=32 a0=34 a1=7fff2bfe52b0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016457.774:77091): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=BPF msg=audit(1765016458.622:77092): prog-id=0 op=UNLOAD
type=USER_LOGIN msg=audit(1765016460.115:77093): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016460.115:77094): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016460.117:77095): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=317596 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016460.181:77096): pid=317596 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016460.182:77097): pid=317596 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016460.183:77098): pid=317596 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016460.188:77099): pid=317596 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016460.191:77100): pid=317596 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016460.191:77101): pid=317596 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016460.199:77102): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016460.199:77103): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765016460.205:77104): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016460.206:77105): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016460.207:77106): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=317614 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016460.257:77107): pid=317614 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016460.257:77108): pid=317614 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016460.258:77109): pid=317614 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016460.261:77110): pid=317614 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016460.906:77111): pid=317614 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016460.907:77112): pid=317614 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016460.995:77113): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016460.995:77114): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765016461.280:77115): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016461.280:77116): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016461.281:77117): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=317664 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016461.350:77118): pid=317664 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016461.351:77119): pid=317664 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016461.352:77120): pid=317664 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016461.355:77121): pid=317664 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016461.359:77122): pid=317664 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016461.359:77123): pid=317664 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016461.362:77124): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016461.362:77125): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=ANOM_PROMISCUOUS msg=audit(1765016466.890:77126): dev=tap9d07566a-d2 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016466.890:77126): arch=c000003e syscall=46 success=yes exit=60 a0=34 a1=7fff2bfe50a0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016466.890:77126): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=NETFILTER_CFG msg=audit(1765016467.044:77127): table=filter:2 family=2 entries=18 op=nft_register_chain pid=317719 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016467.044:77127): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffff571ad20 a2=0 a3=7ffff571ad0c items=0 ppid=262401 pid=317719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016467.044:77127): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016467.044:77128): table=mangle:3 family=2 entries=24 op=nft_register_chain pid=317719 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016467.044:77128): arch=c000003e syscall=46 success=yes exit=3652 a0=3 a1=7ffff571ad20 a2=0 a3=7ffff571ad0c items=0 ppid=262401 pid=317719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016467.044:77128): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016467.059:77129): table=raw:4 family=2 entries=9 op=nft_register_chain pid=317719 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016467.059:77129): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffff571ad20 a2=0 a3=100 items=0 ppid=262401 pid=317719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016467.059:77129): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016467.094:77130): table=filter:5 family=10 entries=18 op=nft_register_chain pid=317721 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016467.094:77130): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffdfb9b3800 a2=0 a3=7ffdfb9b37ec items=0 ppid=262401 pid=317721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016467.094:77130): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016467.094:77131): table=mangle:6 family=10 entries=22 op=nft_register_chain pid=317721 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016467.094:77131): arch=c000003e syscall=46 success=yes exit=3304 a0=3 a1=7ffdfb9b3800 a2=0 a3=7ffdfb9b37ec items=0 ppid=262401 pid=317721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016467.094:77131): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016467.107:77132): table=raw:7 family=10 entries=9 op=nft_register_chain pid=317721 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016467.107:77132): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffdfb9b3800 a2=0 a3=100 items=0 ppid=262401 pid=317721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016467.107:77132): proctitle=6970367461626C65732D726573746F7265002D6E
type=USER_ACCT msg=audit(1765016467.468:77133): pid=317738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765016467.468:77134): pid=317738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd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exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765016467.469:77135): pid=317738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765016467.471:77136): pid=317738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016467.995:77137): prog-id=2270 op=LOAD
type=SYSCALL msg=audit(1765016467.995:77137): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffc84f20510 a2=90 a3=9500000001 items=0 ppid=317778 pid=317779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016467.995:77137): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F346230303762363438363534313433666535313837383461383065663562
type=USER_END msg=audit(1765016468.073:77138): pid=317738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765016468.073:77139): pid=317738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016469.478:77140): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016469.622:77141): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016472.240:77142): dev=tap058a6a84-b8 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016472.240:77142): arch=c000003e syscall=46 success=yes exit=60 a0=34 a1=7fff2bfe50a0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016472.240:77142): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=NETFILTER_CFG msg=audit(1765016472.392:77143): table=filter:2 family=2 entries=18 op=nft_register_chain pid=317882 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016472.392:77143): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffec7811320 a2=0 a3=7ffec781130c items=0 ppid=262401 pid=317882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016472.392:77143): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016472.392:77144): table=mangle:3 family=2 entries=24 op=nft_register_chain pid=317882 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016472.392:77144): arch=c000003e syscall=46 success=yes exit=3652 a0=3 a1=7ffec7811320 a2=0 a3=7ffec781130c items=0 ppid=262401 pid=317882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016472.392:77144): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016472.405:77145): table=raw:4 family=2 entries=9 op=nft_register_chain pid=317882 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016472.405:77145): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffec7811320 a2=0 a3=100 items=0 ppid=262401 pid=317882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016472.405:77145): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016472.459:77146): table=filter:5 family=10 entries=18 op=nft_register_chain pid=317889 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016472.459:77146): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffee1388f70 a2=0 a3=7ffee1388f5c items=0 ppid=262401 pid=317889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016472.459:77146): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016472.460:77147): table=mangle:6 family=10 entries=22 op=nft_register_chain pid=317889 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016472.460:77147): arch=c000003e syscall=46 success=yes exit=3304 a0=3 a1=7ffee1388f70 a2=0 a3=7ffee1388f5c items=0 ppid=262401 pid=317889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016472.460:77147): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016472.467:77148): table=raw:7 family=10 entries=9 op=nft_register_chain pid=317889 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016472.467:77148): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffee1388f70 a2=0 a3=100 items=0 ppid=262401 pid=317889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016472.467:77148): proctitle=6970367461626C65732D726573746F7265002D6E
type=USER_ACCT msg=audit(1765016472.807:77149): pid=317913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765016472.807:77150): pid=317913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd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exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765016472.808:77151): pid=317913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765016472.809:77152): pid=317913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016473.281:77153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016473.284:77154): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016473.288:77155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016473.326:77156): prog-id=2271 op=LOAD
type=SYSCALL msg=audit(1765016473.326:77156): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffe25cc7d80 a2=90 a3=9500000001 items=0 ppid=317966 pid=317967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016473.326:77156): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F313130633665633139313934373339343637303132633134356534643436
type=SERVICE_STOP msg=audit(1765016473.413:77157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765016473.565:77158): pid=317913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765016473.565:77159): pid=317913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016473.655:77160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016473.677:77161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016473.729:77162): dev=tap9d07566a-d2 prom=0 old_prom=256 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016473.729:77162): arch=c000003e syscall=46 success=yes exit=32 a0=34 a1=7fff2bfe52b0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016473.729:77162): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=BPF msg=audit(1765016473.866:77163): prog-id=0 op=UNLOAD
type=ANOM_PROMISCUOUS msg=audit(1765016474.005:77164): dev=tap058a6a84-b8 prom=0 old_prom=256 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016474.005:77164): arch=c000003e syscall=46 success=yes exit=32 a0=34 a1=7fff2bfe52b0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016474.005:77164): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=BPF msg=audit(1765016475.813:77165): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765016479.478:77166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016479.604:77167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016482.478:77168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016482.481:77169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016482.637:77170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016482.713:77171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016489.461:77172): dev=tap699fdaf2-b6 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016489.461:77172): arch=c000003e syscall=46 success=yes exit=60 a0=34 a1=7fff2bfe50a0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016489.461:77172): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=NETFILTER_CFG msg=audit(1765016489.593:77173): table=filter:2 family=2 entries=18 op=nft_register_chain pid=318279 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016489.593:77173): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7fff2adecc40 a2=0 a3=7fff2adecc2c items=0 ppid=262401 pid=318279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016489.593:77173): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016489.593:77174): table=mangle:3 family=2 entries=24 op=nft_register_chain pid=318279 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016489.593:77174): arch=c000003e syscall=46 success=yes exit=3652 a0=3 a1=7fff2adecc40 a2=0 a3=7fff2adecc2c items=0 ppid=262401 pid=318279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016489.593:77174): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016489.603:77175): table=raw:4 family=2 entries=9 op=nft_register_chain pid=318279 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016489.603:77175): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7fff2adecc40 a2=0 a3=100 items=0 ppid=262401 pid=318279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016489.603:77175): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016489.643:77176): table=filter:5 family=10 entries=18 op=nft_register_chain pid=318281 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016489.643:77176): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffed4f38260 a2=0 a3=7ffed4f3824c items=0 ppid=262401 pid=318281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016489.643:77176): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016489.644:77177): table=mangle:6 family=10 entries=22 op=nft_register_chain pid=318281 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016489.644:77177): arch=c000003e syscall=46 success=yes exit=3304 a0=3 a1=7ffed4f38260 a2=0 a3=7ffed4f3824c items=0 ppid=262401 pid=318281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016489.644:77177): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016489.657:77178): table=raw:7 family=10 entries=9 op=nft_register_chain pid=318281 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016489.657:77178): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffed4f38260 a2=0 a3=100 items=0 ppid=262401 pid=318281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016489.657:77178): proctitle=6970367461626C65732D726573746F7265002D6E
type=USER_ACCT msg=audit(1765016490.029:77179): pid=318298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765016490.029:77180): pid=318298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071646863702D30626163343933302D313431342D343064632D393736662D35313265383232633066396520656E762050524F434553535F5441473D646E736D6173712D30626163343933302D313431342D343064632D393736662D35313265383232633066396520646E736D617371202D2D6E6F2D686F737473202D2D6E6F2D7265736F6C76202D2D7069642D66696C653D2F7661722F6C69622F6E657574726F6E2F646863702F30626163343933302D313431342D343064632D393736662D3531326538323263306639652F706964202D2D646863702D686F73747366696C653D2F7661722F6C69622F6E657574726F6E2F646863702F30626163343933302D313431342D343064632D393736662D3531326538323263306639652F686F7374202D2D6164646E2D686F7374733D2F7661722F6C69622F6E657574726F6E2F646863702F30626163343933302D313431342D343064632D393736662D3531326538323263306639652F6164646E5F686F737473202D2D646863702D6F70747366696C653D2F7661722F6C69622F6E657574726F6E2F646863702F30626163343933302D313431342D343064632D393736662D3531326538323263306639652F6F707473202D2D646863702D6C6561736566696C653D2F7661722F6C69622F6E657574726F6E2F646863702F30626163343933302D313431342D343064632D393736662D3531326538323263306639652F6C6561736573202D2D646863702D6D617463683D7365743A697078652C313735202D2D646863702D75736572636C6173733D7365743A69707865362C69505845202D2D6C6F63616C2D73657276696365202D2D62696E642D64796E616D6963202D2D646863702D72616E67653D7365743A7375626E65742D65326565616135632D643230332D343534332D396430362D3235343833646139333231652C31302E3130302E302E302C7374617469632C3235352E3235352E3235352E3234302C383634303073202D2D646863702D6F7074696F6E2D666F7263653D6F7074696F6E3A6D74752C31343432202D2D646863702D6C656173652D6D61783D3136202D2D636F6E662D66696C653D2F6465762F6E756C6C202D2D646F6D61696E3D6F70656E737461636B6C6F63616C exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765016490.030:77181): pid=318298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765016490.032:77182): pid=318298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016490.499:77183): prog-id=2272 op=LOAD
type=SYSCALL msg=audit(1765016490.499:77183): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffe21b50dc0 a2=90 a3=9500000001 items=0 ppid=318338 pid=318339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016490.499:77183): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F616662353965663862393930363234633963366432353764323434373664
type=USER_END msg=audit(1765016490.581:77184): pid=318298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765016490.582:77185): pid=318298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016491.859:77186): dev=tap699fdaf2-b6 prom=0 old_prom=256 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016491.859:77186): arch=c000003e syscall=46 success=yes exit=32 a0=34 a1=7fff2bfe52b0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016491.859:77186): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=BPF msg=audit(1765016493.019:77187): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765016500.474:77188): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016500.627:77189): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016501.901:77190): dev=tap091ccf4f-57 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016501.901:77190): arch=c000003e syscall=46 success=yes exit=60 a0=34 a1=7fff2bfe50a0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016501.901:77190): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=NETFILTER_CFG msg=audit(1765016502.044:77191): table=filter:2 family=2 entries=18 op=nft_register_chain pid=318574 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016502.044:77191): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffc26a922e0 a2=0 a3=7ffc26a922cc items=0 ppid=262401 pid=318574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016502.044:77191): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016502.044:77192): table=mangle:3 family=2 entries=24 op=nft_register_chain pid=318574 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016502.044:77192): arch=c000003e syscall=46 success=yes exit=3652 a0=3 a1=7ffc26a922e0 a2=0 a3=7ffc26a922cc items=0 ppid=262401 pid=318574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016502.044:77192): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016502.058:77193): table=raw:4 family=2 entries=9 op=nft_register_chain pid=318574 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016502.058:77193): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffc26a922e0 a2=0 a3=100 items=0 ppid=262401 pid=318574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016502.058:77193): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016502.095:77194): table=filter:5 family=10 entries=18 op=nft_register_chain pid=318576 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016502.095:77194): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7fff39814cf0 a2=0 a3=7fff39814cdc items=0 ppid=262401 pid=318576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016502.095:77194): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016502.095:77195): table=mangle:6 family=10 entries=22 op=nft_register_chain pid=318576 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016502.095:77195): arch=c000003e syscall=46 success=yes exit=3304 a0=3 a1=7fff39814cf0 a2=0 a3=7fff39814cdc items=0 ppid=262401 pid=318576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016502.095:77195): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016502.104:77196): table=raw:7 family=10 entries=9 op=nft_register_chain pid=318576 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016502.104:77196): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7fff39814cf0 a2=0 a3=100 items=0 ppid=262401 pid=318576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016502.104:77196): proctitle=6970367461626C65732D726573746F7265002D6E
type=USER_ACCT msg=audit(1765016502.519:77197): pid=318593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765016502.519:77198): pid=318593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071646863702D63343839616165312D316239322D346164392D383232632D32383037623164373735383820656E762050524F434553535F5441473D646E736D6173712D63343839616165312D316239322D346164392D383232632D32383037623164373735383820646E736D617371202D2D6E6F2D686F737473202D2D6E6F2D7265736F6C76202D2D7069642D66696C653D2F7661722F6C69622F6E657574726F6E2F646863702F63343839616165312D316239322D346164392D383232632D3238303762316437373538382F706964202D2D646863702D686F73747366696C653D2F7661722F6C69622F6E657574726F6E2F646863702F63343839616165312D316239322D346164392D383232632D3238303762316437373538382F686F7374202D2D6164646E2D686F7374733D2F7661722F6C69622F6E657574726F6E2F646863702F63343839616165312D316239322D346164392D383232632D3238303762316437373538382F6164646E5F686F737473202D2D646863702D6F70747366696C653D2F7661722F6C69622F6E657574726F6E2F646863702F63343839616165312D316239322D346164392D383232632D3238303762316437373538382F6F707473202D2D646863702D6C6561736566696C653D2F7661722F6C69622F6E657574726F6E2F646863702F63343839616165312D316239322D346164392D383232632D3238303762316437373538382F6C6561736573202D2D646863702D6D617463683D7365743A697078652C313735202D2D646863702D75736572636C6173733D7365743A69707865362C69505845202D2D6C6F63616C2D73657276696365202D2D62696E642D64796E616D6963202D2D646863702D72616E67653D7365743A7375626E65742D66656532363835362D643838382D343039342D383334372D6665323933353233363163352C31302E3130302E302E302C7374617469632C3235352E3235352E3235352E3234302C383634303073202D2D646863702D6F7074696F6E2D666F7263653D6F7074696F6E3A6D74752C31343432202D2D646863702D6C656173652D6D61783D3136202D2D636F6E662D66696C653D2F6465762F6E756C6C202D2D646F6D61696E3D6F70656E737461636B6C6F63616C exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765016502.520:77199): pid=318593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765016502.522:77200): pid=318593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016503.020:77201): prog-id=2273 op=LOAD
type=SYSCALL msg=audit(1765016503.020:77201): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7fffefa02470 a2=90 a3=9500000001 items=0 ppid=318632 pid=318633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016503.020:77201): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F636133613366623130366234623331313033633862323739343132656264
type=USER_END msg=audit(1765016503.104:77202): pid=318593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765016503.105:77203): pid=318593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016503.476:77204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016503.594:77205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016503.725:77206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016503.728:77207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016503.872:77208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016503.906:77209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016504.256:77210): pid=318700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=318700 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765016509.430:77211): pid=318699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=318700 suid=74 rport=37016 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765016509.431:77212): pid=318699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=318700 suid=74 rport=37016 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016509.441:77213): pid=318699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=318700 suid=74 rport=37016 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016509.442:77214): pid=318699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=318700 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016509.442:77215): pid=318699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=318699 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765016509.442:77216): pid=318699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=ssh res=failed'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016509.480:77217): dev=tap091ccf4f-57 prom=0 old_prom=256 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016509.480:77217): arch=c000003e syscall=46 success=yes exit=32 a0=15 a1=7fff2bfe52b0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016509.480:77217): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=BPF msg=audit(1765016510.477:77218): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765016510.481:77219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016510.700:77220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016513.477:77221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016513.480:77222): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016513.664:77223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016513.690:77224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016518.462:77225): dev=tap727d3eb4-92 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016518.462:77225): arch=c000003e syscall=46 success=yes exit=60 a0=15 a1=7fff2bfe50a0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016518.462:77225): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=NETFILTER_CFG msg=audit(1765016518.610:77226): table=filter:2 family=2 entries=18 op=nft_register_chain pid=319019 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016518.610:77226): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7fff4555ace0 a2=0 a3=7fff4555accc items=0 ppid=262401 pid=319019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016518.610:77226): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016518.611:77227): table=mangle:3 family=2 entries=24 op=nft_register_chain pid=319019 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016518.611:77227): arch=c000003e syscall=46 success=yes exit=3652 a0=3 a1=7fff4555ace0 a2=0 a3=7fff4555accc items=0 ppid=262401 pid=319019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016518.611:77227): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016518.619:77228): table=raw:4 family=2 entries=9 op=nft_register_chain pid=319019 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016518.619:77228): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7fff4555ace0 a2=0 a3=100 items=0 ppid=262401 pid=319019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016518.619:77228): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016518.660:77229): table=filter:5 family=10 entries=18 op=nft_register_chain pid=319021 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016518.660:77229): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7fff2e81d010 a2=0 a3=7fff2e81cffc items=0 ppid=262401 pid=319021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016518.660:77229): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016518.661:77230): table=mangle:6 family=10 entries=22 op=nft_register_chain pid=319021 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016518.661:77230): arch=c000003e syscall=46 success=yes exit=3304 a0=3 a1=7fff2e81d010 a2=0 a3=7fff2e81cffc items=0 ppid=262401 pid=319021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016518.661:77230): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016518.680:77231): table=raw:7 family=10 entries=9 op=nft_register_chain pid=319021 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016518.680:77231): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7fff2e81d010 a2=0 a3=100 items=0 ppid=262401 pid=319021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016518.680:77231): proctitle=6970367461626C65732D726573746F7265002D6E
type=USER_ACCT msg=audit(1765016519.048:77232): pid=319038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765016519.048:77233): pid=319038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071646863702D64383763373962632D333765312D346232382D623564332D62356639333065346666616420656E762050524F434553535F5441473D646E736D6173712D64383763373962632D333765312D346232382D623564332D62356639333065346666616420646E736D617371202D2D6E6F2D686F737473202D2D6E6F2D7265736F6C76202D2D7069642D66696C653D2F7661722F6C69622F6E657574726F6E2F646863702F64383763373962632D333765312D346232382D623564332D6235663933306534666661642F706964202D2D646863702D686F73747366696C653D2F7661722F6C69622F6E657574726F6E2F646863702F64383763373962632D333765312D346232382D623564332D6235663933306534666661642F686F7374202D2D6164646E2D686F7374733D2F7661722F6C69622F6E657574726F6E2F646863702F64383763373962632D333765312D346232382D623564332D6235663933306534666661642F6164646E5F686F737473202D2D646863702D6F70747366696C653D2F7661722F6C69622F6E657574726F6E2F646863702F64383763373962632D333765312D346232382D623564332D6235663933306534666661642F6F707473202D2D646863702D6C6561736566696C653D2F7661722F6C69622F6E657574726F6E2F646863702F64383763373962632D333765312D346232382D623564332D6235663933306534666661642F6C6561736573202D2D646863702D6D617463683D7365743A697078652C313735202D2D646863702D75736572636C6173733D7365743A69707865362C69505845202D2D6C6F63616C2D73657276696365202D2D62696E642D64796E616D6963202D2D646863702D72616E67653D7365743A7375626E65742D33623265343637612D613230632D346364332D626530662D3438656361396139343861342C31302E3130312E302E302C7374617469632C3235352E3235352E3235352E3234302C383634303073202D2D646863702D6F7074696F6E2D666F7263653D6F7074696F6E3A6D74752C31343432202D2D646863702D6C656173652D6D61783D3136202D2D636F6E662D66696C653D2F6465762F6E756C6C202D2D646F6D61696E3D6F70656E737461636B6C6F63616C exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765016519.049:77234): pid=319038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765016519.051:77235): pid=319038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016519.524:77236): prog-id=2274 op=LOAD
type=SYSCALL msg=audit(1765016519.524:77236): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7fff77bd98a0 a2=90 a3=9500000001 items=0 ppid=319079 pid=319080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016519.524:77236): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F386665386164623737366533663131653363323130666130363236353531
type=USER_END msg=audit(1765016519.621:77237): pid=319038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765016519.622:77238): pid=319038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765016521.376:77239): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016521.376:77240): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016521.378:77241): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=319159 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016521.435:77242): pid=319159 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016521.435:77243): pid=319159 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016521.436:77244): pid=319159 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016521.441:77245): pid=319159 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016521.444:77246): pid=319159 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016521.444:77247): pid=319159 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016521.449:77248): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016521.449:77249): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765016521.453:77250): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016521.453:77251): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016521.455:77252): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=319177 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016521.518:77253): pid=319177 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016521.518:77254): pid=319177 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D696D6167652072656769737472792E7265646861742E696F2F7268636570682F7268636570682D372D7268656C393A6C6174657374202D2D74696D656F757420383935206C73 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016521.519:77255): pid=319177 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016521.522:77256): pid=319177 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016523.079:77257): pid=319177 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016523.080:77258): pid=319177 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016523.085:77259): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016523.085:77260): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765016523.127:77261): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016523.127:77262): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016523.129:77263): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=319387 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016523.190:77264): pid=319387 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016523.191:77265): pid=319387 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016523.192:77266): pid=319387 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016523.196:77267): pid=319387 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016523.199:77268): pid=319387 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016523.199:77269): pid=319387 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016523.203:77270): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016523.203:77271): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765016523.206:77272): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016523.206:77273): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016523.208:77274): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=319405 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016523.270:77275): pid=319405 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016523.271:77276): pid=319405 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016523.273:77277): pid=319405 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016523.275:77278): pid=319405 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016523.904:77279): pid=319405 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016523.905:77280): pid=319405 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016523.966:77281): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016523.966:77282): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=ANOM_PROMISCUOUS msg=audit(1765016524.061:77283): dev=tap15da9b9b-1f prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016524.061:77283): arch=c000003e syscall=46 success=yes exit=60 a0=15 a1=7fff2bfe50a0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016524.061:77283): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=NETFILTER_CFG msg=audit(1765016524.174:77284): table=filter:2 family=2 entries=18 op=nft_register_chain pid=319473 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016524.174:77284): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffc81ab53c0 a2=0 a3=7ffc81ab53ac items=0 ppid=262401 pid=319473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016524.174:77284): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016524.175:77285): table=mangle:3 family=2 entries=24 op=nft_register_chain pid=319473 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016524.175:77285): arch=c000003e syscall=46 success=yes exit=3652 a0=3 a1=7ffc81ab53c0 a2=0 a3=7ffc81ab53ac items=0 ppid=262401 pid=319473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016524.175:77285): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016524.185:77286): table=raw:4 family=2 entries=9 op=nft_register_chain pid=319473 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016524.185:77286): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffc81ab53c0 a2=0 a3=100 items=0 ppid=262401 pid=319473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016524.185:77286): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016524.235:77287): table=filter:5 family=10 entries=18 op=nft_register_chain pid=319475 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016524.235:77287): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffc5e246f50 a2=0 a3=7ffc5e246f3c items=0 ppid=262401 pid=319475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016524.235:77287): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016524.236:77288): table=mangle:6 family=10 entries=22 op=nft_register_chain pid=319475 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016524.236:77288): arch=c000003e syscall=46 success=yes exit=3304 a0=3 a1=7ffc5e246f50 a2=0 a3=7ffc5e246f3c items=0 ppid=262401 pid=319475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016524.236:77288): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016524.249:77289): table=raw:7 family=10 entries=9 op=nft_register_chain pid=319475 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016524.249:77289): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffc5e246f50 a2=0 a3=100 items=0 ppid=262401 pid=319475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016524.249:77289): proctitle=6970367461626C65732D726573746F7265002D6E
type=USER_LOGIN msg=audit(1765016524.454:77290): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016524.454:77291): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016524.455:77292): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=319487 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016524.514:77293): pid=319487 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016524.514:77294): pid=319487 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016524.515:77295): pid=319487 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016524.520:77296): pid=319487 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016524.524:77297): pid=319487 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016524.524:77298): pid=319487 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016524.529:77299): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016524.529:77300): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_ACCT msg=audit(1765016524.568:77301): pid=319510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765016524.568:77302): pid=319510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd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exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765016524.568:77303): pid=319510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765016524.569:77304): pid=319510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016525.021:77305): prog-id=2275 op=LOAD
type=SYSCALL msg=audit(1765016525.021:77305): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffd2a391420 a2=90 a3=9500000001 items=0 ppid=319549 pid=319550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016525.021:77305): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F376264316632333262336666623764316632323135666634383431383636
type=USER_END msg=audit(1765016525.084:77306): pid=319510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765016525.084:77307): pid=319510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016526.433:77308): dev=tap15da9b9b-1f prom=0 old_prom=256 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016526.433:77308): arch=c000003e syscall=46 success=yes exit=32 a0=34 a1=7fff2bfe52b0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016526.433:77308): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=ANOM_PROMISCUOUS msg=audit(1765016529.145:77309): dev=tapa93c3801-ac prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016529.145:77309): arch=c000003e syscall=46 success=yes exit=60 a0=34 a1=7fff2bfe50a0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016529.145:77309): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=NETFILTER_CFG msg=audit(1765016529.314:77310): table=filter:2 family=2 entries=18 op=nft_register_chain pid=319708 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016529.314:77310): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffd5ee79aa0 a2=0 a3=7ffd5ee79a8c items=0 ppid=262401 pid=319708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016529.314:77310): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016529.315:77311): table=mangle:3 family=2 entries=24 op=nft_register_chain pid=319708 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016529.315:77311): arch=c000003e syscall=46 success=yes exit=3652 a0=3 a1=7ffd5ee79aa0 a2=0 a3=7ffd5ee79a8c items=0 ppid=262401 pid=319708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016529.315:77311): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016529.327:77312): table=raw:4 family=2 entries=9 op=nft_register_chain pid=319708 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016529.327:77312): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffd5ee79aa0 a2=0 a3=100 items=0 ppid=262401 pid=319708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016529.327:77312): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016529.364:77313): table=filter:5 family=10 entries=18 op=nft_register_chain pid=319710 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016529.364:77313): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffd2ff354f0 a2=0 a3=7ffd2ff354dc items=0 ppid=262401 pid=319710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016529.364:77313): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016529.365:77314): table=mangle:6 family=10 entries=22 op=nft_register_chain pid=319710 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016529.365:77314): arch=c000003e syscall=46 success=yes exit=3304 a0=3 a1=7ffd2ff354f0 a2=0 a3=7ffd2ff354dc items=0 ppid=262401 pid=319710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016529.365:77314): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016529.381:77315): table=raw:7 family=10 entries=9 op=nft_register_chain pid=319710 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016529.381:77315): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffd2ff354f0 a2=0 a3=100 items=0 ppid=262401 pid=319710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016529.381:77315): proctitle=6970367461626C65732D726573746F7265002D6E
type=USER_ACCT msg=audit(1765016529.760:77316): pid=319727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765016529.760:77317): pid=319727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd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exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765016529.761:77318): pid=319727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765016529.763:77319): pid=319727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016530.301:77320): prog-id=2276 op=LOAD
type=SYSCALL msg=audit(1765016530.301:77320): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffe7e756e90 a2=90 a3=9500000001 items=0 ppid=319767 pid=319768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016530.301:77320): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F653734663535656139313663663161306261636130613930363337383065
type=USER_END msg=audit(1765016530.381:77321): pid=319727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765016530.382:77322): pid=319727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016531.475:77323): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016531.588:77324): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016532.236:77325): prog-id=0 op=UNLOAD
type=ANOM_PROMISCUOUS msg=audit(1765016532.442:77326): dev=tapa93c3801-ac prom=0 old_prom=256 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016532.442:77326): arch=c000003e syscall=46 success=yes exit=32 a0=34 a1=7fff2bfe52b0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016532.442:77326): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=SERVICE_START msg=audit(1765016533.625:77327): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016533.626:77328): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1765016533.819:77329): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016534.477:77330): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016534.481:77331): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016534.655:77332): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016534.747:77333): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016538.836:77334): dev=tap727d3eb4-92 prom=0 old_prom=256 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016538.836:77334): arch=c000003e syscall=46 success=yes exit=32 a0=34 a1=7fff2bfe52b0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016538.836:77334): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=BPF msg=audit(1765016539.320:77335): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765016541.475:77336): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016541.634:77337): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016544.474:77338): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016544.478:77339): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016544.594:77340): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016544.720:77341): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016562.475:77342): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016562.589:77343): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016564.482:77344): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016564.629:77345): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016565.473:77346): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016565.477:77347): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016565.630:77348): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016565.657:77349): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016572.475:77350): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016572.616:77351): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016575.474:77352): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016575.478:77353): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016575.579:77354): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016575.694:77355): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765016584.544:77356): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016584.544:77357): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016584.546:77358): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=320351 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016584.612:77359): pid=320351 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016584.612:77360): pid=320351 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016584.614:77361): pid=320351 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016584.621:77362): pid=320351 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016584.623:77363): pid=320351 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016584.623:77364): pid=320351 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016584.628:77365): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016584.628:77366): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765016584.637:77367): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016584.637:77368): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016584.638:77369): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=320369 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016584.702:77370): pid=320369 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016584.702:77371): pid=320369 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016584.703:77372): pid=320369 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016584.706:77373): pid=320369 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016585.343:77374): pid=320369 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016585.343:77375): pid=320369 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016585.432:77376): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016585.432:77377): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765016585.690:77378): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016585.690:77379): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016585.691:77380): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=320420 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016585.758:77381): pid=320420 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016585.758:77382): pid=320420 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016585.759:77383): pid=320420 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016585.763:77384): pid=320420 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016585.765:77385): pid=320420 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016585.766:77386): pid=320420 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016585.769:77387): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016585.770:77388): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765016592.615:77389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016592.718:77390): dev=tapbe97762f-7f prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016592.718:77390): arch=c000003e syscall=46 success=yes exit=60 a0=34 a1=7fff2bfe50a0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016592.718:77390): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=SERVICE_STOP msg=audit(1765016592.781:77391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=NETFILTER_CFG msg=audit(1765016592.856:77392): table=filter:2 family=2 entries=18 op=nft_register_chain pid=320494 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016592.856:77392): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffc525d6d40 a2=0 a3=7ffc525d6d2c items=0 ppid=262401 pid=320494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016592.856:77392): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016592.857:77393): table=mangle:3 family=2 entries=24 op=nft_register_chain pid=320494 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016592.857:77393): arch=c000003e syscall=46 success=yes exit=3652 a0=3 a1=7ffc525d6d40 a2=0 a3=7ffc525d6d2c items=0 ppid=262401 pid=320494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016592.857:77393): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016592.865:77394): table=raw:4 family=2 entries=9 op=nft_register_chain pid=320494 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765016592.865:77394): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffc525d6d40 a2=0 a3=100 items=0 ppid=262401 pid=320494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016592.865:77394): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016592.909:77395): table=filter:5 family=10 entries=18 op=nft_register_chain pid=320497 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016592.909:77395): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffe50250a90 a2=0 a3=7ffe50250a7c items=0 ppid=262401 pid=320497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016592.909:77395): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016592.910:77396): table=mangle:6 family=10 entries=22 op=nft_register_chain pid=320497 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016592.910:77396): arch=c000003e syscall=46 success=yes exit=3304 a0=3 a1=7ffe50250a90 a2=0 a3=7ffe50250a7c items=0 ppid=262401 pid=320497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016592.910:77396): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765016592.921:77397): table=raw:7 family=10 entries=9 op=nft_register_chain pid=320497 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765016592.921:77397): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffe50250a90 a2=0 a3=100 items=0 ppid=262401 pid=320497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016592.921:77397): proctitle=6970367461626C65732D726573746F7265002D6E
type=USER_ACCT msg=audit(1765016593.304:77398): pid=320514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765016593.304:77399): pid=320514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd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exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765016593.305:77400): pid=320514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765016593.306:77401): pid=320514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016593.831:77402): prog-id=2277 op=LOAD
type=SYSCALL msg=audit(1765016593.831:77402): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffe1812ed20 a2=90 a3=9500000001 items=0 ppid=320554 pid=320555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016593.831:77402): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F353037336564626463396361323636383738336538326166653035396239
type=USER_END msg=audit(1765016593.912:77403): pid=320514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765016593.912:77404): pid=320514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016595.479:77405): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016595.601:77406): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016596.246:77407): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016596.250:77408): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016596.446:77409): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016596.470:77410): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016603.476:77411): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016603.639:77412): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016606.476:77413): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016606.481:77414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016606.716:77415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016606.738:77416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016623.476:77417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016623.592:77418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016626.475:77419): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016626.478:77420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016626.484:77421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016626.605:77422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016626.698:77423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016626.777:77424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016634.475:77425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016634.586:77426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016637.477:77427): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016637.481:77428): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016637.609:77429): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016637.743:77430): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016643.799:77431): dev=tapbe97762f-7f prom=0 old_prom=256 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016643.799:77431): arch=c000003e syscall=46 success=yes exit=32 a0=34 a1=7fff2bfe52b0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016643.799:77431): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=USER_LOGIN msg=audit(1765016645.785:77432): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016645.785:77433): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016645.788:77434): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=321022 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=BPF msg=audit(1765016645.838:77435): prog-id=0 op=UNLOAD
type=USER_ACCT msg=audit(1765016645.871:77436): pid=321022 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016645.872:77437): pid=321022 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016645.874:77438): pid=321022 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016645.881:77439): pid=321022 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016645.885:77440): pid=321022 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016645.886:77441): pid=321022 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016645.891:77442): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016645.891:77443): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765016645.893:77444): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016645.893:77445): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016645.895:77446): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=321064 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016645.952:77447): pid=321064 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016645.953:77448): pid=321064 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F75742038393520636865636B2D686F7374 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016645.953:77449): pid=321064 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016645.956:77450): pid=321064 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016646.389:77451): pid=321064 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016646.389:77452): pid=321064 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016646.394:77453): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016646.394:77454): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765016646.431:77455): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016646.431:77456): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016646.432:77457): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=321104 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016646.498:77458): pid=321104 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016646.498:77459): pid=321104 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016646.499:77460): pid=321104 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016646.504:77461): pid=321104 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016646.507:77462): pid=321104 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016646.507:77463): pid=321104 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016646.512:77464): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016646.512:77465): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765016646.515:77466): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016646.515:77467): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016646.516:77468): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=321122 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016646.580:77469): pid=321122 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016646.581:77470): pid=321122 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016646.581:77471): pid=321122 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016646.584:77472): pid=321122 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016647.248:77473): pid=321122 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016647.248:77474): pid=321122 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016647.302:77475): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016647.302:77476): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765016647.650:77477): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016647.650:77478): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016647.652:77479): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=321173 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016647.727:77480): pid=321173 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016647.728:77481): pid=321173 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016647.729:77482): pid=321173 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016647.733:77483): pid=321173 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016647.736:77484): pid=321173 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016647.737:77485): pid=321173 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016647.741:77486): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016647.741:77487): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765016654.472:77488): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016654.591:77489): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016656.786:77490): pid=321210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=321210 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765016656.788:77491): pid=321192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=321210 suid=74 rport=44628 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765016656.788:77492): pid=321192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=321210 suid=74 rport=44628 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1765016657.470:77493): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016657.473:77494): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016657.475:77495): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016657.594:77496): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016657.681:77497): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016657.772:77498): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016660.511:77499): pid=321192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=321210 suid=74 rport=44628 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016660.511:77500): pid=321192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=321210 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765016660.512:77501): pid=321192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=101.47.160.186 addr=101.47.160.186 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016660.513:77502): pid=321192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=321192 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765016660.513:77503): pid=321192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=ssh res=failed'UID="root" AUID="unset"
type=VIRT_MACHINE_ID msg=audit(1765016662.226:77504): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-0000000a" uuid=b59377c8-c3d7-452b-8305-d2853ef47bb4 vm-ctx=system_u:system_r:svirt_t:s0:c606,c874 img-ctx=system_u:object_r:svirt_image_t:s0:c606,c874 model=selinux exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_MACHINE_ID msg=audit(1765016662.226:77505): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-0000000a" uuid=b59377c8-c3d7-452b-8305-d2853ef47bb4 vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016662.249:77506): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=virtsecretd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016662.328:77507): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-0000000a" uuid=b59377c8-c3d7-452b-8305-d2853ef47bb4 net=fa:16:3e:ec:95:9c path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016662.328:77508): dev=tapc8391efe-ea prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016662.328:77508): arch=c000003e syscall=46 success=yes exit=60 a0=34 a1=7fff2bfe50a0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016662.328:77508): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=VIRT_RESOURCE msg=audit(1765016662.329:77509): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-0000000a" uuid=b59377c8-c3d7-452b-8305-d2853ef47bb4 net=fa:16:3e:ec:95:9c path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016662.430:77510): prog-id=2278 op=LOAD
type=SYSCALL msg=audit(1765016662.430:77510): arch=c000003e syscall=321 success=yes exit=27 a0=5 a1=7f0d6591c000 a2=98 a3=7f0d48093120 items=0 ppid=1 pid=228868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="rpc-virtqemud" exe="/usr/sbin/virtqemud" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016662.430:77510): proctitle=2F7573722F7362696E2F7669727471656D7564002D2D74696D656F757400313230
type=VIRT_RESOURCE msg=audit(1765016662.431:77511): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="instance-0000000a" uuid=b59377c8-c3d7-452b-8305-d2853ef47bb4 cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d4\x2dinstance\x2d0000000a.scope/" class=all exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016662.431:77512): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000a" uuid=b59377c8-c3d7-452b-8305-d2853ef47bb4 cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d4\x2dinstance\x2d0000000a.scope/" class=path path="/dev/null" rdev=01:03 acl=rw exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016662.431:77513): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000a" uuid=b59377c8-c3d7-452b-8305-d2853ef47bb4 cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d4\x2dinstance\x2d0000000a.scope/" class=path path="/dev/full" rdev=01:07 acl=rw exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016662.431:77514): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000a" uuid=b59377c8-c3d7-452b-8305-d2853ef47bb4 cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d4\x2dinstance\x2d0000000a.scope/" class=path path="/dev/zero" rdev=01:05 acl=rw exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016662.431:77515): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000a" uuid=b59377c8-c3d7-452b-8305-d2853ef47bb4 cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d4\x2dinstance\x2d0000000a.scope/" class=path path="/dev/random" rdev=01:08 acl=rw exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016662.431:77516): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000a" uuid=b59377c8-c3d7-452b-8305-d2853ef47bb4 cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d4\x2dinstance\x2d0000000a.scope/" class=path path="/dev/urandom" rdev=01:09 acl=rw exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016662.431:77517): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000a" uuid=b59377c8-c3d7-452b-8305-d2853ef47bb4 cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d4\x2dinstance\x2d0000000a.scope/" class=path path="/dev/ptmx" rdev=05:02 acl=rw exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016662.431:77518): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000a" uuid=b59377c8-c3d7-452b-8305-d2853ef47bb4 cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d4\x2dinstance\x2d0000000a.scope/" class=path path="/dev/userfaultfd" rdev=0A:7E acl=rw exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016662.431:77519): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000a" uuid=b59377c8-c3d7-452b-8305-d2853ef47bb4 cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d4\x2dinstance\x2d0000000a.scope/" class=path path="/dev/kvm" rdev=0A:E8 acl=rw exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016662.431:77520): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000a" uuid=b59377c8-c3d7-452b-8305-d2853ef47bb4 cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d4\x2dinstance\x2d0000000a.scope/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016662.432:77521): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000a" uuid=b59377c8-c3d7-452b-8305-d2853ef47bb4 cgroup="/sys/fs/cgroup/machine.slice/machine-qemu\x2d4\x2dinstance\x2d0000000a.scope/" class=path path="/dev/urandom" rdev=01:09 acl=rw exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016662.704:77522): dev=tap55ffc629-00 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016662.704:77522): arch=c000003e syscall=46 success=yes exit=60 a0=34 a1=7fff2bfe50a0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016662.704:77522): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=USER_ACCT msg=audit(1765016662.750:77523): pid=321696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765016662.750:77524): pid=321696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E732065786563206F766E6D6574612D35356666633632392D303861352D343034662D383761372D32366465623937383430646320656E762050524F434553535F5441473D686170726F78792D35356666633632392D303861352D343034662D383761372D32366465623937383430646320686170726F7879202D66202F7661722F6C69622F6E657574726F6E2F6F766E2D6D657461646174612D70726F78792F35356666633632392D303861352D343034662D383761372D3236646562393738343064632E636F6E66 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765016662.750:77525): pid=321696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765016662.751:77526): pid=321696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016662.825:77527): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="instance-0000000a" uuid=b59377c8-c3d7-452b-8305-d2853ef47bb4 old-net="?" new-net="fa:16:3e:ec:95:9c" exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016662.825:77528): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=chardev reason=start vm="instance-0000000a" uuid=b59377c8-c3d7-452b-8305-d2853ef47bb4 old-chardev="?" new-chardev="/dev/pts/0" exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016662.825:77529): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=rng reason=start vm="instance-0000000a" uuid=b59377c8-c3d7-452b-8305-d2853ef47bb4 old-rng="?" new-rng="/dev/urandom" exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016662.825:77530): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="instance-0000000a" uuid=b59377c8-c3d7-452b-8305-d2853ef47bb4 old-mem=0 new-mem=131072 exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_RESOURCE msg=audit(1765016662.825:77531): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="instance-0000000a" uuid=b59377c8-c3d7-452b-8305-d2853ef47bb4 old-vcpu=0 new-vcpu=1 exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=VIRT_CONTROL msg=audit(1765016662.825:77532): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="instance-0000000a" uuid=b59377c8-c3d7-452b-8305-d2853ef47bb4 vm-pid=321612 exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016663.270:77533): prog-id=2279 op=LOAD
type=SYSCALL msg=audit(1765016663.270:77533): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffc90d62a30 a2=90 a3=9500000001 items=0 ppid=321734 pid=321735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765016663.270:77533): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F616239336333633364623334653765633363383436343732353162386136
type=USER_END msg=audit(1765016663.374:77534): pid=321696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765016663.374:77535): pid=321696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016665.486:77536): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016665.661:77537): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016668.476:77538): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016668.481:77539): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016668.669:77540): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016668.721:77541): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016685.475:77542): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016685.586:77543): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016688.477:77544): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016688.479:77545): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016688.482:77546): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016688.695:77547): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016688.720:77548): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016688.823:77549): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016696.477:77550): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016696.619:77551): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765016696.759:77552): pid=321965 uid=42436 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="nova" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="nova" AUID="unset"
type=USER_CMD msg=audit(1765016696.759:77553): pid=321965 uid=42436 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd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exe="/usr/bin/sudo" terminal=? res=success'UID="nova" AUID="unset"
type=CRED_REFR msg=audit(1765016696.759:77554): pid=321965 uid=42436 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="nova" AUID="unset"
type=USER_START msg=audit(1765016696.760:77555): pid=321965 uid=42436 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="nova" AUID="unset"
type=USER_END msg=audit(1765016697.356:77556): pid=321965 uid=42436 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="nova" AUID="unset"
type=CRED_DISP msg=audit(1765016697.356:77557): pid=321965 uid=42436 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="nova" AUID="unset"
type=SERVICE_START msg=audit(1765016699.481:77558): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016699.485:77559): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016699.672:77560): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016699.683:77561): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765016707.757:77562): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016707.757:77563): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016707.760:77564): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=322044 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016707.833:77565): pid=322044 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016707.834:77566): pid=322044 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016707.836:77567): pid=322044 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016707.842:77568): pid=322044 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016707.844:77569): pid=322044 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016707.845:77570): pid=322044 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016707.851:77571): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016707.851:77572): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765016707.856:77573): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016707.856:77574): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016707.857:77575): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=322062 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016707.928:77576): pid=322062 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016707.928:77577): pid=322062 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016707.928:77578): pid=322062 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016707.930:77579): pid=322062 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016708.548:77580): pid=322062 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016708.548:77581): pid=322062 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016708.581:77582): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016708.581:77583): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765016708.940:77584): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016708.940:77585): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016708.942:77586): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=322136 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016709.009:77587): pid=322136 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016709.009:77588): pid=322136 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016709.010:77589): pid=322136 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016709.013:77590): pid=322136 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016709.016:77591): pid=322136 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016709.017:77592): pid=322136 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016709.021:77593): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016709.021:77594): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765016716.477:77595): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016716.633:77596): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016719.471:77597): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016719.475:77598): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016719.479:77599): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016719.586:77600): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016719.655:77601): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016719.745:77602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765016720.493:77603): dev=tapc8391efe-ea prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295AUID="unset" UID="qemu" GID="qemu"
type=ANOM_PROMISCUOUS msg=audit(1765016720.637:77604): dev=tapc8391efe-ea prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016720.637:77604): arch=c000003e syscall=46 success=yes exit=60 a0=34 a1=7fff2bfe50a0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016720.637:77604): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=ANOM_PROMISCUOUS msg=audit(1765016720.639:77605): dev=tapc8391efe-ea prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295AUID="unset" UID="root" GID="root"
type=BPF msg=audit(1765016720.656:77606): prog-id=0 op=UNLOAD
type=VIRT_CONTROL msg=audit(1765016720.658:77607): pid=228868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="instance-0000000a" uuid=b59377c8-c3d7-452b-8305-d2853ef47bb4 vm-pid=0 exe="/usr/sbin/virtqemud" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765016720.756:77608): prog-id=0 op=UNLOAD
type=ANOM_PROMISCUOUS msg=audit(1765016720.876:77609): dev=tap55ffc629-00 prom=0 old_prom=256 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765016720.876:77609): arch=c000003e syscall=46 success=yes exit=32 a0=34 a1=7fff2bfe52b0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765016720.876:77609): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=SERVICE_START msg=audit(1765016727.477:77610): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016727.585:77611): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016730.480:77612): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016730.484:77613): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016730.636:77614): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016730.668:77615): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016747.471:77616): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016747.590:77617): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016750.476:77618): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016750.480:77619): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016750.484:77620): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016750.592:77621): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016750.715:77622): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016750.764:77623): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016758.476:77624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016758.600:77625): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016761.475:77626): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016761.478:77627): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016761.590:77628): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016761.686:77629): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765016769.037:77630): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016769.037:77631): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016769.040:77632): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=322618 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016769.105:77633): pid=322618 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016769.105:77634): pid=322618 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016769.107:77635): pid=322618 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016769.111:77636): pid=322618 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016769.114:77637): pid=322618 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016769.114:77638): pid=322618 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016769.118:77639): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016769.118:77640): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765016769.122:77641): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016769.122:77642): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016769.123:77643): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=322636 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016769.187:77644): pid=322636 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016769.188:77645): pid=322636 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016769.188:77646): pid=322636 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016769.191:77647): pid=322636 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016769.851:77648): pid=322636 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016769.851:77649): pid=322636 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016769.938:77650): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016769.938:77651): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765016770.180:77652): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016770.180:77653): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016770.181:77654): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=322687 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016770.240:77655): pid=322687 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016770.241:77656): pid=322687 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016770.242:77657): pid=322687 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016770.245:77658): pid=322687 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016770.249:77659): pid=322687 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016770.249:77660): pid=322687 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016770.253:77661): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016770.253:77662): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765016778.482:77663): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016778.591:77664): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016781.476:77665): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016781.480:77666): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016781.484:77667): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016781.599:77668): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016781.705:77669): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016781.807:77670): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016789.479:77671): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016789.592:77672): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016792.473:77673): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016792.475:77674): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016792.650:77675): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016792.695:77676): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016807.982:77677): pid=322858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=322858 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_START msg=audit(1765016809.475:77678): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016809.600:77679): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016812.471:77680): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016812.475:77681): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016812.478:77682): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016812.645:77683): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016812.665:77684): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016812.741:77685): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1765016813.956:77686): pid=322857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=322858 suid=74 rport=35216 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765016813.957:77687): pid=322857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=322858 suid=74 rport=35216 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016813.967:77688): pid=322857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=322858 suid=74 rport=35216 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016813.967:77689): pid=322857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=322858 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016813.968:77690): pid=322857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=322857 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765016813.968:77691): pid=322857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016820.472:77692): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016820.616:77693): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016823.480:77694): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016823.483:77695): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016823.688:77696): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016823.698:77697): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765016830.266:77698): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016830.266:77699): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016830.268:77700): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=323053 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016830.343:77701): pid=323053 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016830.343:77702): pid=323053 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016830.344:77703): pid=323053 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016830.350:77704): pid=323053 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016830.353:77705): pid=323053 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016830.353:77706): pid=323053 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016830.358:77707): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016830.358:77708): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765016830.361:77709): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016830.361:77710): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016830.363:77711): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=323071 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016830.426:77712): pid=323071 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016830.426:77713): pid=323071 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016830.427:77714): pid=323071 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016830.430:77715): pid=323071 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016831.113:77716): pid=323071 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016831.113:77717): pid=323071 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016831.226:77718): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016831.226:77719): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765016831.470:77720): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016831.470:77721): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016831.472:77722): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=323121 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016831.521:77723): pid=323121 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016831.521:77724): pid=323121 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016831.521:77725): pid=323121 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016831.525:77726): pid=323121 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016831.527:77727): pid=323121 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016831.528:77728): pid=323121 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016831.532:77729): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016831.532:77730): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765016840.473:77731): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016840.624:77732): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016843.476:77733): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016843.480:77734): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016843.484:77735): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016843.643:77736): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016843.820:77737): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016843.831:77738): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016851.472:77739): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016851.598:77740): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016854.477:77741): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016854.480:77742): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016854.652:77743): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016854.682:77744): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016871.480:77745): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016871.616:77746): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016874.470:77747): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016874.474:77748): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016874.479:77749): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016874.680:77750): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016874.702:77751): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016874.756:77752): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016882.485:77753): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016882.609:77754): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016885.476:77755): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016885.480:77756): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016885.622:77757): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016885.642:77758): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765016891.550:77759): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016891.550:77760): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016891.551:77761): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=323489 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016891.618:77762): pid=323489 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016891.618:77763): pid=323489 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016891.620:77764): pid=323489 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016891.625:77765): pid=323489 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016891.627:77766): pid=323489 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016891.628:77767): pid=323489 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016891.632:77768): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016891.632:77769): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765016891.638:77770): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016891.638:77771): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016891.640:77772): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=323507 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016891.698:77773): pid=323507 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016891.698:77774): pid=323507 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016891.699:77775): pid=323507 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016891.701:77776): pid=323507 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016892.345:77777): pid=323507 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016892.345:77778): pid=323507 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016892.499:77779): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016892.499:77780): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765016892.689:77781): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016892.689:77782): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016892.691:77783): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=323558 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016892.756:77784): pid=323558 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016892.757:77785): pid=323558 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016892.757:77786): pid=323558 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016892.762:77787): pid=323558 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016892.764:77788): pid=323558 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016892.764:77789): pid=323558 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016892.769:77790): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016892.769:77791): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765016902.475:77792): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016902.610:77793): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016905.484:77794): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016905.488:77795): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016905.492:77796): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016905.600:77797): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016905.664:77798): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016905.723:77799): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016913.475:77800): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016913.612:77801): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016916.213:77802): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016916.218:77803): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016916.341:77804): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016916.467:77805): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016933.477:77806): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016933.606:77807): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016936.487:77808): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016936.490:77809): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016936.494:77810): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016936.645:77811): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016936.654:77812): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016936.664:77813): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016944.479:77814): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016944.596:77815): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016946.471:77816): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016946.477:77817): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016946.586:77818): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016946.714:77819): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765016952.785:77820): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016952.785:77821): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016952.787:77822): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=323922 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016952.854:77823): pid=323922 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016952.854:77824): pid=323922 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016952.857:77825): pid=323922 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016952.862:77826): pid=323922 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016952.865:77827): pid=323922 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016952.865:77828): pid=323922 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016952.872:77829): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016952.872:77830): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765016952.881:77831): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016952.881:77832): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016952.883:77833): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=323940 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016952.945:77834): pid=323940 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016952.945:77835): pid=323940 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016952.946:77836): pid=323940 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016952.949:77837): pid=323940 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016953.665:77838): pid=323940 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016953.665:77839): pid=323940 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016953.775:77840): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016953.775:77841): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765016953.980:77842): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765016953.980:77843): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016953.982:77844): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=323990 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765016954.048:77845): pid=323990 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765016954.048:77846): pid=323990 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765016954.049:77847): pid=323990 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765016954.052:77848): pid=323990 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016954.055:77849): pid=323990 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765016954.056:77850): pid=323990 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765016954.060:77851): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765016954.060:77852): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765016959.675:77853): pid=324009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=324009 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765016961.332:77854): pid=324008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=324009 suid=74 rport=47922 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765016961.332:77855): pid=324008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=324009 suid=74 rport=47922 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1765016964.476:77856): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016964.620:77857): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765016966.362:77858): pid=324008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=324009 suid=74 rport=47922 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016966.362:77859): pid=324008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=324009 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765016966.363:77860): pid=324008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=324008 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765016966.363:77861): pid=324008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016967.476:77862): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016967.479:77863): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016967.483:77864): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016967.643:77865): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016967.651:77866): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016967.787:77867): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016975.472:77868): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016975.591:77869): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016977.476:77870): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016977.480:77871): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016977.650:77872): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016977.709:77873): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016995.484:77874): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016995.622:77875): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016998.482:77876): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016998.486:77877): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765016998.490:77878): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016998.604:77879): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016998.623:77880): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765016998.684:77881): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017006.221:77882): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017006.337:77883): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017008.479:77884): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017008.483:77885): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017008.600:77886): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017008.717:77887): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765017014.075:77888): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765017014.076:77889): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765017014.078:77890): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=324345 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765017014.146:77891): pid=324345 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765017014.146:77892): pid=324345 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765017014.147:77893): pid=324345 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765017014.154:77894): pid=324345 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765017014.157:77895): pid=324345 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765017014.158:77896): pid=324345 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765017014.164:77897): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765017014.164:77898): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765017014.173:77899): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765017014.173:77900): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765017014.175:77901): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=324363 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765017014.237:77902): pid=324363 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765017014.237:77903): pid=324363 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765017014.238:77904): pid=324363 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765017014.241:77905): pid=324363 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765017014.892:77906): pid=324363 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765017014.892:77907): pid=324363 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765017014.962:77908): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765017014.963:77909): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765017015.222:77910): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765017015.222:77911): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765017015.224:77912): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=324414 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765017015.287:77913): pid=324414 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765017015.287:77914): pid=324414 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765017015.288:77915): pid=324414 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765017015.293:77916): pid=324414 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765017015.296:77917): pid=324414 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765017015.297:77918): pid=324414 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765017015.301:77919): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765017015.301:77920): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765017026.478:77921): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017026.604:77922): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017029.476:77923): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017029.480:77924): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017029.483:77925): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017029.684:77926): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017029.736:77927): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017029.795:77928): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017036.476:77929): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017036.597:77930): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017039.472:77931): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017039.476:77932): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017039.615:77933): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017039.738:77934): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765017041.274:77935): dev=tapca83c526-b3 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765017041.274:77935): arch=c000003e syscall=46 success=yes exit=60 a0=34 a1=7fff2bfe50a0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765017041.274:77935): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=NETFILTER_CFG msg=audit(1765017041.411:77936): table=filter:2 family=2 entries=18 op=nft_register_chain pid=324617 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765017041.411:77936): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7ffff0319710 a2=0 a3=7ffff03196fc items=0 ppid=262401 pid=324617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765017041.411:77936): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765017041.412:77937): table=mangle:3 family=2 entries=24 op=nft_register_chain pid=324617 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765017041.412:77937): arch=c000003e syscall=46 success=yes exit=3652 a0=3 a1=7ffff0319710 a2=0 a3=7ffff03196fc items=0 ppid=262401 pid=324617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765017041.412:77937): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765017041.422:77938): table=raw:4 family=2 entries=9 op=nft_register_chain pid=324617 subj=system_u:system_r:spc_t:s0 comm="iptables-restor"
type=SYSCALL msg=audit(1765017041.422:77938): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7ffff0319710 a2=0 a3=100 items=0 ppid=262401 pid=324617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765017041.422:77938): proctitle=69707461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765017041.464:77939): table=filter:5 family=10 entries=18 op=nft_register_chain pid=324620 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765017041.464:77939): arch=c000003e syscall=46 success=yes exit=2644 a0=3 a1=7fff23f34010 a2=0 a3=7fff23f33ffc items=0 ppid=262401 pid=324620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765017041.464:77939): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765017041.464:77940): table=mangle:6 family=10 entries=22 op=nft_register_chain pid=324620 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765017041.464:77940): arch=c000003e syscall=46 success=yes exit=3304 a0=3 a1=7fff23f34010 a2=0 a3=7fff23f33ffc items=0 ppid=262401 pid=324620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765017041.464:77940): proctitle=6970367461626C65732D726573746F7265002D6E
type=NETFILTER_CFG msg=audit(1765017041.472:77941): table=raw:7 family=10 entries=9 op=nft_register_chain pid=324620 subj=system_u:system_r:spc_t:s0 comm="ip6tables-resto"
type=SYSCALL msg=audit(1765017041.472:77941): arch=c000003e syscall=46 success=yes exit=1132 a0=3 a1=7fff23f34010 a2=0 a3=100 items=0 ppid=262401 pid=324620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:spc_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765017041.472:77941): proctitle=6970367461626C65732D726573746F7265002D6E
type=USER_ACCT msg=audit(1765017042.282:77942): pid=324637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765017042.282:77943): pid=324637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd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exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765017042.283:77944): pid=324637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765017042.285:77945): pid=324637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765017042.835:77946): prog-id=2280 op=LOAD
type=SYSCALL msg=audit(1765017042.835:77946): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffcb7a7cc60 a2=90 a3=9500000001 items=0 ppid=324676 pid=324677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765017042.835:77946): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F626166336564303462303264313138326261623635613163326231363337
type=USER_END msg=audit(1765017042.917:77947): pid=324637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765017042.918:77948): pid=324637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765017048.864:77949): prog-id=0 op=UNLOAD
type=ANOM_PROMISCUOUS msg=audit(1765017049.001:77950): dev=tapca83c526-b3 prom=0 old_prom=256 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="clevis"
type=SYSCALL msg=audit(1765017049.001:77950): arch=c000003e syscall=46 success=yes exit=32 a0=34 a1=7fff2bfe52b0 a2=0 a3=0 items=0 ppid=1 pid=22221 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="clevis" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="clevis" SGID="clevis" FSGID="clevis"
type=PROCTITLE msg=audit(1765017049.001:77950): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=SERVICE_START msg=audit(1765017057.485:77951): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017057.628:77952): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017060.489:77953): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017060.493:77954): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017060.497:77955): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017060.601:77956): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017060.700:77957): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017060.726:77958): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017067.472:77959): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017067.607:77960): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017070.476:77961): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017070.479:77962): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017070.627:77963): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017070.674:77964): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765017075.317:77965): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765017075.318:77966): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765017075.321:77967): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=324930 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765017075.391:77968): pid=324930 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765017075.392:77969): pid=324930 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=776869636820707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765017075.393:77970): pid=324930 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765017075.399:77971): pid=324930 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765017075.402:77972): pid=324930 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765017075.403:77973): pid=324930 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765017075.408:77974): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765017075.408:77975): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765017075.419:77976): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765017075.419:77977): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765017075.420:77978): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=324948 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765017075.471:77979): pid=324948 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765017075.471:77980): pid=324948 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=2F62696E2F707974686F6E33202F7661722F6C69622F636570682F31393339653835312D623130632D356333622D396262372D3865376633383032333365382F6365706861646D2E61333166626465643834353565633538633066356464653863336435633461316635396465353738396236373262346633656139636438643239613064316333202D2D74696D656F757420383935206761746865722D6661637473 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765017075.471:77981): pid=324948 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765017075.474:77982): pid=324948 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765017076.058:77983): pid=324948 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765017076.059:77984): pid=324948 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765017076.114:77985): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765017076.114:77986): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGIN msg=audit(1765017076.419:77987): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_START msg=audit(1765017076.419:77988): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=CRYPTO_KEY_USER msg=audit(1765017076.420:77989): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=324997 suid=1002  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="ceph-admin" SUID="ceph-admin"
type=USER_ACCT msg=audit(1765017076.482:77990): pid=324997 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="ceph-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_CMD msg=audit(1765017076.483:77991): pid=324997 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/ceph-admin" cmd=6C73202F6574632F73797363746C2E64 exe="/usr/bin/sudo" terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_REFR msg=audit(1765017076.483:77992): pid=324997 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_START msg=audit(1765017076.487:77993): pid=324997 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765017076.491:77994): pid=324997 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=CRED_DISP msg=audit(1765017076.491:77995): pid=324997 uid=1002 auid=1002 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="ceph-admin" AUID="ceph-admin"
type=USER_END msg=audit(1765017076.495:77996): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=USER_LOGOUT msg=audit(1765017076.495:77997): pid=306003 uid=0 auid=1002 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.108 terminal=ssh res=success'UID="root" AUID="ceph-admin" ID="ceph-admin"
type=SERVICE_START msg=audit(1765017088.476:77998): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017088.619:77999): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017091.481:78000): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017091.484:78001): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017091.488:78002): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017091.632:78003): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8db16ea3ec08f89f47a02d211a4be96693a3fa9369a46ba8c4ccdb3c35d1faa8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017091.693:78004): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9a80149ad389e9d40dd029debffc6756f2317afe77600649a966e7a9b71de0a8 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017091.773:78005): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=0ff9255db4e093668b381c1a39d5353d6c648609b331d9324573a8161ce142f7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765017094.326:78006): pid=325102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=325102 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765017094.327:78007): pid=325101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=325102 suid=74 rport=36972 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765017094.327:78008): pid=325101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=325102 suid=74 rport=36972 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765017094.392:78009): pid=325101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765017094.405:78010): pid=325101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765017094.405:78011): pid=325101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:e0:39:03:0c:58:11:ed:73:22:37:9b:fb:b5:96:ae:e6:c9:d5:b4:79:86:de:e9:6d:a3:5f:2e:d5:1c:00:d2:eb exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765017094.435:78012): pid=325101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765017094.436:78013): pid=325101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=325102 suid=74 rport=36972 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765017094.439:78014): pid=325101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765017094.439:78015): pid=325101 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=74 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1765017094.439:78015): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffebaec4820 a2=4 a3=3e8 items=0 ppid=182854 pid=325101 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=74 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765017094.439:78015): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765017094.441:78016): pid=325101 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1765017094.479:78017): pid=325101 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765017094.481:78018): pid=325104 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=325104 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=CRED_ACQ msg=audit(1765017094.482:78019): pid=325104 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1765017094.526:78020): pid=325101 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765017094.526:78021): pid=325101 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765017094.527:78022): pid=325101 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=325105 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765017094.592:78023): pid=325121 uid=1000 auid=1000 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765017094.592:78024): pid=325121 uid=1000 auid=1000 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687163746F776C6C62797175627877636A6E6E787A75697473636662656D6862203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765017094.593:78025): pid=325121 uid=1000 auid=1000 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765017094.598:78026): pid=325121 uid=1000 auid=1000 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765017095.133:78027): pid=325121 uid=1000 auid=1000 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765017095.133:78028): pid=325121 uid=1000 auid=1000 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765017095.135:78029): pid=325101 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765017095.135:78030): pid=325101 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1765017098.472:78031): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017098.599:78032): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=97302af2aee72b86f2c7665facfa7e678b162f338c523143a5d422bb3ffe024c comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765017099.599:78033): pid=325101 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=325104 suid=1000 rport=36972 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765017099.600:78034): pid=325101 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=325104 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765017099.602:78035): pid=325101 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1765017099.602:78036): pid=325101 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765017099.603:78037): pid=325101 uid=0 auid=1000 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=325101 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=SERVICE_START msg=audit(1765017101.474:78038): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017101.478:78039): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017101.695:78040): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f25d3ffff98de47a69d62499f96ea994b4e109d6116b0c970c46bf6739ab7b89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017101.718:78041): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=028351a501d210d53e57bf100d7bd3f16d862ebdc5c0b7200016897ae117e537 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765017113.191:78042): pid=325190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=325190 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765017113.428:78043): pid=325189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=325190 suid=74 rport=34366 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765017113.429:78044): pid=325189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=325190 suid=74 rport=34366 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765017115.322:78045): pid=325189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=325190 suid=74 rport=34366 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765017115.323:78046): pid=325189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=325190 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765017115.323:78047): pid=325189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=101.47.160.186 addr=101.47.160.186 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765017115.324:78048): pid=325189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=325189 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765017115.324:78049): pid=325189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=101.47.160.186 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765017119.475:78050): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765017119.591:78051): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=643364bd80a54443f6d3bfd8354a56bab838c7380de0624b1f6f9710be8a2d83 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765017119.885:78052): pid=325255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=325255 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765017119.886:78053): pid=325254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=325255 suid=74 rport=32956 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765017119.886:78054): pid=325254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=325255 suid=74 rport=32956 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765017119.951:78055): pid=325254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765017119.964:78056): pid=325254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765017119.964:78057): pid=325254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:e0:39:03:0c:58:11:ed:73:22:37:9b:fb:b5:96:ae:e6:c9:d5:b4:79:86:de:e9:6d:a3:5f:2e:d5:1c:00:d2:eb exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765017119.994:78058): pid=325254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765017119.994:78059): pid=325254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=325255 suid=74 rport=32956 laddr=38.102.83.234 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765017119.997:78060): pid=325254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765017119.997:78061): pid=325254 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=75 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1765017119.997:78061): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff9dc5e2e0 a2=4 a3=3e8 items=0 ppid=182854 pid=325254 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=75 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765017119.997:78061): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765017119.999:78062): pid=325254 uid=0 auid=1000 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1765017120.031:78063): pid=325254 uid=0 auid=1000 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765017120.033:78064): pid=325257 uid=0 auid=1000 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=325257 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=CRED_ACQ msg=audit(1765017120.035:78065): pid=325257 uid=0 auid=1000 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1765017120.079:78066): pid=325254 uid=0 auid=1000 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765017120.079:78067): pid=325254 uid=0 auid=1000 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765017120.081:78068): pid=325254 uid=0 auid=1000 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b5:42:88:8f:2f:fa:90:b6:ce:86:4f:37:a7:a2:e4:ab:89:e4:90:73:2a:04:63:6a:d9:a2:e5:5e:6f:a5:ea:81 direction=? spid=325258 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765017120.150:78069): pid=325258 uid=1000 auid=1000 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765017120.150:78070): pid=325258 uid=1000 auid=1000 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=7273796E63202D2D736572766572202D2D73656E646572202D6C4C6F67447470727A652E4C73667843202E202F7661722F6C6F67 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765017120.152:78071): pid=325258 uid=1000 auid=1000 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765017120.156:78072): pid=325258 uid=1000 auid=1000 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"